A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Contact: mailto:security@ckr-sota.ru
Encryption: https://ckr-sota.ru/pgp/security.pgp
Canonical: https://ckr-sota.ru/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=IHcn
-----END PGP SIGNATURE-----