A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@afrigis.co.za
Encryption: https://www.afrigis.co.za/pgp-key.txt
Preferred-Languages: en
Canonical: https://www.afrigis.co.za/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----
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=6yGQ
-----END PGP SIGNATURE-----