A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an origanisation will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifable via a simple way, a security.txt notice.

# If you have found a security threat on this site, please contact us.
# V případě že jste nalezli bezpečnostní hrozbu na našem webu, kontaktujte nás prosím.
Contact: <a href='mailto:admin@xart.cz'>admin@xart.cz</a>
Contact: +420 566 466 411