A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: admin@waher.org
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEEFdqvbH+6rsFIqmVe1zSXeQeOMYwFAl3xkqUACgkQ1zSXeQeO
MYwNuQf/e86wKyf7vj1ixn5UFEKwwSiSNAHijSVn5CP5w1YAOqlzuxTnXja0IPZL
WqX5b2Lh4T1Qzcw2U3MoByYqWM4WQ+PjoD/r6Njd5y7RlOiZzHzolrOQh9mSLa/w
aZuhk3RCJELyUTjIVrJ3p8rt2IBZmncEKYMtbnr6ldkvDbj1VmMiZeQxsgn+7lY4
uUiv7XtyTmEUQ4KyYMTCVxU3fLu6F8IsKZDP/YleTAtyiJ+Hr9Nr3cYG1FBAiq7w
8vqQ/+bYpM/obSEgRhwez1Fva/RivSHKKu7KO5lbfw0ZJCLqhZTv1ZkDLYV7Z8Aj
1CuL6AwzdQ7uIuOkRhCbmmakFjiU3Q==
=1LwS
-----END PGP SIGNATURE-----