A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

## R.M. Manfredi S.n.c.
## security.txt

Expires: Sun, 31 Dec 2023 23:59:59 +0200
Preferred-Languages: en, it
Canonical: https://www.rmmanfredi.com/.well-known/security.txt

# For message encryption do encrypt the body of the message, not the e-mail itself.
Contact: mailto:matteo.manfredi@rmmanfredi.com
Contact: https://twitter.com/itsmatteomanf
Encryption: https://keybase.io/itsmatteomanf/pgp_keys.asc
-----BEGIN PGP SIGNATURE-----
Version: Keybase OpenPGP v2.1.13
Comment: https://keybase.io/crypto
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=U8Sd
-----END PGP SIGNATURE-----