A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@cryptolect.org
Contact: mailto:info@cryptolect.org
Encryption: https://cryptolect.org/.well-known/pgp.txt
Canonical: https://cryptolect.org/.well-known/security.txt
Preferred-Languages: en
Expires: 2027-06-17T19:00:00.000Z


-----BEGIN PGP SIGNATURE-----

iIoEARYIADIWIQQt4UKgZEMbHbfp3dUroijnAAR6LgUCZnAmEBQcaW5mb0Bjcnlw
dG9sZWN0Lm9yZwAKCRAroijnAAR6LqMMAP9ivGLMEVg/xz9tZWkXjbUS9Jsxt0ZS
UJRqGVomkANLOQEAu68vAHLZK2hylgLzdTf+Ay0v1F4rMYwIXW/D35Ui+AI=
=2MLX
-----END PGP SIGNATURE-----