A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: valasek.jan@plavebniurad.cz
Encryption: https://plavebniurad.cz/.well-known/pgp-key.asc
Canonical: https://plavebniurad.cz/.well-known/security.txt
Preferred-Languages: cs

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEL1SGFEsErR2oiGH0wSjg3IhicqEFAl1SQkIACgkQwSjg3Ihi
cqFjSwf8C2xJKVf3MMx5HR0Uvuem+BQlkYpRAiGoDF9y3Vifa6K10wKZZOtiuIeQ
yXSA4gZi8Iu/z7MgNbR4C7A7zfUTTpKHvDX+e31YuAHaxzjLeLr+TpJfbLOe8rGx
TFZub1pTUUNKgZvNqAun3Unoifxna4GLQiZxfyn3DcCb9otAWRDbTQzpT+uRNnrT
Nz4QWAbGWQ0UHOYMuIG72olLbdcpJQZ9XVUWiNzjn1TsXdveyYmq677A8iB0brBU
R+4VMwDWvjzCVeZMTDF/TKLQmBIZaEd8ewSUb3iBU5iNjMTSO7hcQ5bwtaQ1XyFa
miuYEYkCHz5CAOegTklHKBDUDOMsjg==
=oAYz
-----END PGP SIGNATURE-----