A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@fg.cz
Encryption: https://www.fg.cz/pgp.asc
Preferred-Languages: cs, en
Expires: 2024-05-09T08:33:08+02:00
-----BEGIN PGP SIGNATURE-----
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=ifRM
-----END PGP SIGNATURE-----