A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@catalyst-au.net
Encryption: https://pgp.mit.edu/pks/lookup?op=get&search=0xD9CE24853C661DA3
Preferred-Languages: en, nl
Canonical: https://www.catalyst-au.net/.well-known/security.txt
Policy: https://www.catalyst-au.net/information-security-policy
Hiring: https://www.catalyst-au.net/jobs
Expires: Fri, 16 Oct 2021 15:38:56 +1000
-----BEGIN PGP SIGNATURE-----
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=der1
-----END PGP SIGNATURE-----