A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:noc@semtelco.com
Contact: tel:+1-971-501-7500
Expires: 2025-12-12T08:00:00.000Z
Preferred-Languages: en
Canonical: https://semtelco.com/.well-known/security.txt
Canonical: https://www.semtelco.com/.well-known/security.txt
Encryption: https://semtelco.com/.well-known/semtelco-pub-key.txt
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEXCy14sEIKsm+K8fkVl3X6f4Ruq8FAmXX68YACgkQVl3X6f4R
uq8B7wf/SAUg2G11f0OfJ0EDekF7K1QSFOkEQPA6vvGKrj6ZPtJXp2hTG4BX9pIs
06pwvnlS2bmfEttPPtb7Tbl9n6ty/uXmEqXEd+AuqvyKRZsI6jtz5yARQCNhUgmj
nXrwIL0otyuDdXHoCj5+/ptnplVP3vyndRKD3gYu2RIW7Ij8u1KOF826K54u4Sh3
RHxp4MHsqOWBoGHursc/v2qve+IbuympRTvtXOS/+BsDKxMylQsyBURHaO1L9Lv9
aG34uBA5PHSEsbP+S5DHAr2LYHb0k2gKewXcbNUptQesQUilU/gQnl0/jG27t/lL
grxWku7VKgCofdL7LuwoMJb4lfZExw==
=N10s
-----END PGP SIGNATURE-----