A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@chronomics.com
Encryption: https://www.chronomics.com/.well-known/chronomics.asc
Preferred-Languages: en
Canonical: https://www.chronomics.com/.well-known/security.txt
Hiring: https://www.chronomics.com/careers
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEqYxn3Tp4h/kcdm+f77/F2w1VOcIFAl82eqEACgkQ77/F2w1V
OcKZWwf/YmPButvYycKojHzWgQJZxoaSTHFxaEQLvjxpr9TZah69DWA9HPtBSxWk
ErRQC7kRGeiPyTTrVP805gIN458pvlqJwNLIzJ4yu5kUUu5azIanCsTp/yQDoNfS
uGJ3ZSjErCQudqqeIPCr6rwRWkzCRxGAmDUmh8oSyRurb0prZlV/ebFdFBgO/Qun
mh9nfFgPUljw1nvz49AL54Iq5WbRFzWZ5/wPQVMeDUefGWtJjictfxRQtah+Pt6v
rn/u4ojpuM74DZi0gN1tbCTbNn83dFk86NGH+Ufkrhz71Ji/a7NKp4KqXNyoZEAn
ANzQa9ljJ31bWl1zAcTuekaaYOYuxQ==
=yaLn
-----END PGP SIGNATURE-----