A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

Acknowledgments: https://autonomy.gwynethllewelyn.net/hall-of-fame
Canonical: https://autonomy.gwynethllewelyn.net/.well-known/security.txt
Canonical: https://gwynethllewelyn.net/.well-known/security.txt
Canonical: https://gwynethllewelyn.net/security.txt
Contact: mailto:gwyneth.llewelyn@gwynethllewelyn.net
Contact: mailto:webmaster@gwynethllewelyn.net
Contact: mailto:gwynethllewelyn@gmail.com
Contact: mailto:gwyneth.llewelyn@yahoo.co.uk
Contact: https://keybase.io/gwynethllewelyn/#_
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/CE8A6006B611850F127572BAD93EAA3DC4B3E1CB
Encryption: https://keybase.io/gwynethllewelyn/pgp_keys.asc
Expires: 2030-01-01T00:01:00Z
Policy: https://autonomy.gwynethllewelyn.net/security-policy
Preferred-Languages: pt, en, de, fr