A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: security@jfrog.com
Encryption: https://jfrog.com/security/public-key.txt
Preferred-Languages: en
Canonical: https://jfrog.com/.well-known/security.txt
Hiring: https://join.jfrog.com
-----BEGIN PGP SIGNATURE-----
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=fXJP
-----END PGP SIGNATURE-----