A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Canonical URL
Canonical: https://wait4it.cyou/.well-known/security.txt

# Our security address
Contact: mailto:hostmaster@wait4it.cyou

# These are the languages we speak
Preferred-Languages: nl,en

# Our OpenPGP key
Encryption: openpgp4fpr:407B6A3B9CBAC6FE156A0BE54BF247D24ECADAA7

# You shouldn't trust this file, once it has expired (like bad milk)
Expires: 2026-04-04T03:40:42Z

-----BEGIN PGP SIGNATURE-----
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=dmAx
-----END PGP SIGNATURE-----