A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:disclosure@nbx.com
Encryption: https://nbx.com/publickey.txt
Preferred-Languages: en, no
Canonical: https://nbx.com/.well-known/security.txt
Policy: https://nbx.com/security/disclosure-policy
OpenBugBounty: https://openbugbounty.org/bugbounty/nbxsec/
-----BEGIN PGP SIGNATURE-----
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=oX9M
-----END PGP SIGNATURE-----