A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Canonical URL
Canonical: https://wait4it.cyou/.well-known/security.txt

# Our security address
Contact: mailto:hostmaster@wait4it.cyou

# These are the languages we speak
Preferred-Languages: nl,en

# Our OpenPGP key
Encryption: openpgp4fpr:407B6A3B9CBAC6FE156A0BE54BF247D24ECADAA7

# You shouldn't trust this file, once it has expired (like bad milk)
Expires: 2026-07-02T07:53:01Z

-----BEGIN PGP SIGNATURE-----
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=ECzX
-----END PGP SIGNATURE-----