A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:nabijaczleweli@nabijaczleweli.xyz
Expires: 2030-01-01T00:00:00.000Z
Encryption: https://nabijaczleweli.xyz/pgp.txt
-----BEGIN PGP SIGNATURE-----
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=Wj0X
-----END PGP SIGNATURE-----