A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


Contact: mailto:security@projectpending.com
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/FBE1C9194C13A9F0784AED921B31807F758EF623
Preferred-Languages: en, et
Canonical: https://projectpending.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQJQBAEBCAA6FiEE++HJGUwTqfB4Su2SGzGAf3WO9iMFAl60QOwcHHNlY3VyaXR5
QHByb2plY3RwZW5kaW5nLmNvbQAKCRAbMYB/dY72I5SxD/wPSb86MNvE7S0ilZPV
mUUnNi/gB3v3WEZ5HsOfH8VYFpglNqGuIDtq8OQ64paCNI4o3MjrxCnfXBUV6ftl
8SEUDuD37pOOX+j+1Q61vdb8QVVFdAXgiVZ6n9PU43SUw3Ff7uiTkE7PttgTj7iq
RospL+LoUm1Lzx2vBOh62jC43yc4O7Kns92gbSgM6diQBmTgYForXSzHXRwqT3AE
vT8i6I4PX/Vh8nwzTC6TzFNsbOSxEd5YRiUbq2kamXL3tJmm5dlvaGH1wsPnVBKN
b95LLck70Q6sxAInt6gGhf2mT9C4e1ZEEJd4t4o74Q0e14m/qgEr91fg21avIYRT
BvlpYERklGeRmCGv94PoNwzgZM/LpaYCECpo7eXwPR48eU/lzvJBmY4SWMrC3dU5
yeS+PivKLIVdhRdpNxDK5Rq9g/q4sNvstDNyrHAZZ6yIDAU829ZSotWn+l3BHs3x
HRrB2B2LWLPML3DEHltJ/gM2DQAkezhu0tjE8ZAuDGkHKhm1VsqQUrCkNYYCpaAZ
k/YXssoEfU3/7pV8kY3yCc2gz6zGtphP+iU6mQa4NXxl080lu/EwOLxGHQcoLATT
TzwM3UghBvd7Ss5r9CBMyN8vQ5OyIPqivvYVG1ZV0XsFIbRCcS9T9zlLOk7lFGFi
Bpf25jfEbWZ0EYzeco798LSVQg==
=i4+4
-----END PGP SIGNATURE-----