A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:dave@dloftus.com
Expires: 2033-01-01T05:00:00.000Z
Encryption: https://dloftus.com/dloftus.asc
Preferred-Languages: en
Canonical: https://dloftus.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEYTNsO16du1X1M/6+TOaJbMqpB/gFAmWGcagACgkQTOaJbMqp
B/ifmQf/V903vc/sT8EqbzjflvMEZU5SYbYCwxcenwpmG/wJx0QyzFTY5cf+m1+r
7JsVHpas8PJUPicvlHKP29d7AadElf02/ll2uPVSSaC4pUSQ/4U1c5tJ7rp+Ev7N
dhnlMIdCTvxSdY/LV320ZJpWfkFrWDIyvAyZP0Rx2sfRiBFeDMBg1DrBcjpIgz4j
28WPHKWgOGmc80Pxyvzl3naLhzxQJ1VIOQfCCrnYCdv/KPAm4bGK3qY0EgXOUXvg
5hH7/zbgnCMpxMlBQSAK9hN83J4g7I7mmyaRhtAlwi1aV1Ce/xBkeKkstBk2FvVG
3qEYj2o5M3zfYFpSufN8n/wfklTkaQ==
=4+4I
-----END PGP SIGNATURE-----