A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security-contact@cybercrew.cc
Encryption: https://cybercrew.cc/.well-known/contact_pgp.txt
Preferred-Languages: en, de
Canonical: https://cybercrew.cc/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQHSBAEBCAA8FiEEI8jgyQtrVW2A6aAaO+ijWM3T+EcFAmODxbweHHNlY3VyaXR5
LWNvbnRhY3RAY3liZXJjcmV3LmNjAAoJEDvoo1jN0/hHBEQMAJ2SvRzxiAJwv9lq
GIClk731ob3jIwbaFNFWPMXjr788Gd5wmTO9oe0E513xa1SgYQdu/0rli8pPUHqc
PScYMYfqIPOpCkRs9IagT3De3hT+d8MKhnMyvOanhlwXSG8LpMIosJhhtNdZk+mt
5+wSp9cMn2Cv6Ag29UVw51nBWiwXdX3CN1LMJS/ZNk0ibZq2N8/i4g3L1Wr3W3tb
KrvP4OUezDRKuTu4KD9b0GDLSFYE2PqN4i7QYdw8S6RFhtCT4MI+x/c7+dMkkqoZ
QyDe69DBWiYnB+GDvJWiq0nUURGYrmuupXO4fA43vQyKzkomPlGqu4gA4JsY/xK8
1HiQ1ZtkMcM6Xp7j8yentyWwnXZH/6oOuy/eWJW8rjMg1zYA7JLq3o+1gT7qeRZn
o+jXEUk9rbVbyi+ORDRFrDatGJrx0H7L7hT/FcsP4QRXrn6QJ8VidS3OhqY/zuhM
4PsLt9VpsildZQ54wGeqX/jql67XyLvsAVtPSfkVEbEhA/MODA==
=U3mH
-----END PGP SIGNATURE-----