A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:devops@joycar.com.br
Encryption: https://joycar.com.br/pgp/key.txt
Preferred-Languages: en
Canonical: https://joycar.com.br/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQGzBAEBCAAdFiEEMgjYcVy5e0Ot7AmgXqoZ1nVMxjMFAl9t8AEACgkQXqoZ1nVM
xjOSjQv/dLh0hpEgQXMLzO9MTFe5uAKW5UFTemuGkis3cWI1UwHJ/7YKM1cjYg1A
snUrAPpCXgxSXuUpnsYe/MRGhv8Wm6JObr2u9KYSTm60/6K8AJwQemI9NsYgdRY1
+Rs6+TIHNN1ksc1Mbnc1UVUO6jPwaR8KvXr8x/wxEDy2EuVBzoVIld+56tFWdLMV
rEnzgOeejQe5AqIzvLfpmjwx0cGbGUJeBe4onN/bCF1hxjYg4XDSY1JzaRjWyPRa
TjocOAuFlqF2ZYCTMWVLkarqwe0jY/MfFfLRSVwdKZQFp43xoQNrDC5sMQ8+7AUI
9jKzQk5qQvAVfbD8taF02FVGLxqeEJePs/RFpsiRm6jIIuG+8dB+YaTXEnqYL6/K
385vaRg3VotXO99GMiZmy1tBGRyEkNZ37CFb8+RvsicirZbEHpqNhFwK3Yjdi0w+
xX9dHvhPTmOkxCgAzpbiX14vUJo1J9B2xH0roBst7nw+FtW8dDa5MONfiOR0aUWd
YdGxBrMP
=xAwL
-----END PGP SIGNATURE-----