A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@psmail.net
Expires: Wed, 19 Jan 2022 00:00 -0400
Encryption: https://info.psmail.net/download/postmaster@psmail.net.asc
Acknowledgments: https://info.psmail.net/xsupport/psmail-security-advisories/
Preferred-Languages: en
Canonical: https://psmail.net/well-known/security.txt
Policy: https://info.psmail.net/xsupport/psmail-security-advisories/
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEEmxibkv8n35HfeefwNPhOijlNg+AFAmBnZEQACgkQNPhOijlN
g+DaqQf/TeNO6xkHkClQ/PZ5wMdfnGF8HXAjnyw6oNoydj8YNCbJMAuPEAiqJz3l
fifHFIqxYXI5hGLH7vKdYvNEDh7smhee/BmW1dwj3J2TgtHzJy79IIxeM4aVklv9
q1NFZ4Lkr1h1NdBY9YSJp102heG71A0N9uyYvkxs2nHqUc/TLtJee66X/XJxpDMB
Yj/FeSt/vsvR5934SFgkvcLepVC1/+DV18W2baydOPdED/rf7kwTmyZWNmlZ9J+m
gv4/hGP2VkPuAd8IFY2L5tZ+smKj2XcXIjA0Q+um/UgVJE5/AdhWoCYntXlKdE2t
2H5so8Ufv92Qzo0A+cYwlVH2SfEQZw==
=1AZ8
-----END PGP SIGNATURE-----