A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# The canonical address used for security contact under the 3v.fi domain
Canonical: https://3v.fi/.well-known/security.txt

# Contact email address
Contact: mailto:security@3v.fi

# Encryption keys
Encryption: https://keybase.io/3v/pgp_keys.asc
Encryption: https://3v.fi/pgp_keys.asc

# Available languages
Preferred-Languages: en, fi

# Hall of Fame
Acknowledgements: https://i.3v.fi/security-ack.txt
-----BEGIN PGP SIGNATURE-----
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=MNrT
-----END PGP SIGNATURE-----