A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@m0noc.net
Contact: https://uk.linkedin.com/in/paul-bolton
Expires: 2026-07-01T00:00:00.000Z
Encryption: https://openpgpkey.m0noc.net/.well-known/openpgpkey/m0noc.net/hu/t5s8ztdbon8yzntexy6oz5y48etqsnbb
Preferred-Languages: en
-----BEGIN PGP SIGNATURE-----
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=hCo7
-----END PGP SIGNATURE-----