A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Canonical: https://korelogic.com/.well-known/security.txt
Contact: mailto:security@korelogic.com
Encryption: https://korelogic.com/Resources/142BB87A015694B9.asc
Preferred-Languages: en
Expires: 2026-01-05T06:00:00.000Z
-----BEGIN PGP SIGNATURE-----
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=BETk
-----END PGP SIGNATURE-----