A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@mention-me.com
Encryption: https://mention-me.com/keys/security.key
Preferred-Languages: en
Canonical: https://mention-me.com/.well-known/security.txt
Hiring: https://blog.mention-me.com/careers
-----BEGIN PGP SIGNATURE-----
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=4Cjw
-----END PGP SIGNATURE-----