A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@furl.ai
Expires: 2025-01-01T07:59:00.000Z
Encryption: https://furl.ai/.well-known/security.pub.asc
Preferred-Languages: en
Canonical: https://furl.ai/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----
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=BcJZ
-----END PGP SIGNATURE-----