A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: https://jmorahan.net/contact/
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/F225A02B00BE9BE9B21BB954CD1A508F407EC638
Preferred-Languages: en
Canonical: https://jmorahan.net/.well-known/security.txt
Expires: Mon, 07 Feb 2022 00:00:00 +0000
-----BEGIN PGP SIGNATURE-----
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=hiuM
-----END PGP SIGNATURE-----