A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@evervault.com
Expires: Wed, 15 Mar 2023 12:00 +0000
Encryption: https://evervault.com/pgp-key.txt
Encryption: http://keys.gnupg.net/pks/lookup?op=get&search=0xF70BFEBDEE68DA9F
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/CA4F3F7BCEBAB287936B3799F70BFEBDEE68DA9F
Preferred-Languages: en
Canonical: https://evervault.com/.well-known/security.txt
Hiring: https://evervault.com/jobs
-----BEGIN PGP SIGNATURE-----
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=ZQSF
-----END PGP SIGNATURE-----