A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@flywire.com

Encryption: https://www.flywire.com/.well-known/pgp-key.txt

Preferred-Languages: en

Canonical: https://www.flywire.com/.well-known/security.txt

Hiring: https://www.flywire.com/company/careers

-----BEGIN PGP SIGNATURE-----
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=+JbM
-----END PGP SIGNATURE-----