A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:leo+sec@leomwilson.com
Encryption: https://leomwilson.com/pgp-key.txt
Preferred-Languages: en
Canonical: https://leomwilson.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=R3Q5
-----END PGP SIGNATURE-----