A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: bruno.produit@protonmail.ch
Encryption: https://brunoproduit.ch/misc/brunoproduit.asc
Preferred-Languages: en,fr,de
Canonical: https://brunoproduit.ch/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=ULeY
-----END PGP SIGNATURE-----