A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA384

Contact: mailto:soc@agilicus.com
Expires: Wed, 1 May 2030 00:00 -0000
Encryption: https://www.agilicus.com/.well-known/soc-public-key.pgp
Encryption: openpgp4fpr:6F6B44A214A72FE516DA11A91C87BFCF5A5C2E7E
Preferred-Languages: en
Canonical: https://www.agilicus.com/security.txt
Policy: https://www.agilicus.com/security-policy.html
-----BEGIN PGP SIGNATURE-----

iKcEARMJAC8WIQRva0SiFKcv5RbaEakch7/PWlwufgUCYEUqOxEcc29jQGFnaWxp
Y3VzLmNvbQAKCRAch7/PWlwufsufAYCIDGmeZh7TGbS+BM5PRsv78LjBS4gy4QCd
6yKKJaF74rfuRs5OBlvOb+1M4nBZ1NcBgIDzzr9e2AVunOQYibwMUiM7alqM5TIz
isCwOOqMXG3pBrUjNMmOQ4Jc1WA4DT8J8w==
=9uW5
-----END PGP SIGNATURE-----