A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@fg.cz
Encryption: https://www.fg.cz/pgp.asc
Preferred-Languages: cs, en
Expires: 2023-05-17T09:15:35+02:00
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEk1w7GXP88+r8MT9j4+rDkrsm6tQFAmKDS/8ACgkQ4+rDkrsm
6tQk4g//Q81TyiFbWZO6s+WQiIBnEMzOKrtOA+eR85bVuKom2OhJzZ2c/1leHhz4
JOOJwNT4UkUouRTL036IDu8FD37P1Fq5uKYR0maDXVnBuYAa1QUEin1bykxL85S1
lbHt+KSsywEwzV6cEBrR37OpGhra3PTmj06VnSRwRtSO8fInWCd5EGEnF7YQRNzA
bE/4ZKYFvBWnDL7p9gXomqENSw6R3Ad8Jt4bIkemUu7cZpd//K0QkwtAZbqv9TRI
anHiyX8p4Nnssu7vKvF7E/7ePginbaXqFAukH1ceghVp8J5kwaIVfu/Zl38qnocq
F7JgGDlSJJJYw+J9rNJVC7rndSKO4kme72IGwECezefEt41tmTHOCNen4fukyNL2
pdrGU8hQnrjFYoU34FSQ3+S4syHnGZup5mzm76E3YFZT1nTxGlkpvr6wmMFFxMQa
UW9q29rqLfvlwydOvTtRvq438hdBJbMaRqGL5aFhhFHWQ8nWpKsBIdLQl4Cxr7en
+MdhyUodjucPawFxRAqTyXocWlWuiOO3SOq2SllL27C8mZ66thPrmOq/Pv4VENXr
6dZMvjMm6F03SvISeR2Ekt1Dw1xWkaddKVif1U7l8ZBTNmdPJ7CDTB+0e7wCgIQS
P4OMao+gks63TqF04+IwabOeDDUaFOJowt+GYKtA4sJHO8V3wF8=
=w++i
-----END PGP SIGNATURE-----