A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Canonical: https://leonis.moe/.well-known/security.txt
Contact: mailto:security@leonis.moe
Encryption: https://leonis.moe/.well-known/pgp-key.txt
Encryption: openpgp4fpr:90a6ebce26d031c7b800cffac5b92d3845fea58d
Expires: 2025-05-20T00:00:00.000Z
-----BEGIN PGP SIGNATURE-----

iHUEABYKAB0WIQSws3dALBfUfIWpj0tRss6oCpfGyAUCZauVdQAKCRBRss6oCpfG
yKm+AP0SlMn+0/itsrg4W6I/yXjAEHr8Kuf95nh3ZAmqmK4B5QD/dRzowFM/Wf/q
K063Yg0mvVBJ6f8J92V7xjfM181B4QI=
=hdTh
-----END PGP SIGNATURE-----