A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:tr@vispaul.me
Contact: mailto:tpaul@NetBSD.prg
Encryption: https://travispaul.me/pgp.txt
Preferred-Languages: en
Canonical: https://travispaul.me/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQFCBAEBCAAsFiEEaj9nRAv7zzUAajL4DKH5L6jtOmQFAl5wdN4OHHRyQHZpc3Bh
dWwubWUACgkQDKH5L6jtOmSOmAf+JhFf12wEMx5AzmYiUwD1VLyI+uHWtnnVx8GS
N5hqlCXrgHpsiJ+TkLt8uzt8ET53Cbhf14P8db4i6soBwloXLQx4I8Db39zJB97/
oJJGCTDy/B3PANbNdI9mN3gVRsYUKk2KZigkFKS+K8n9Akhd/v54cNBTRinwi+Uj
3cKWsMLZoSPk303gsR2fDrA/s1bbIZ3djkaoMMHtQwIwIbEX4J66EmA89FNo4HY8
BwTsT0+k0hKGP8y2tmjb/Ij/fmlAIb3lxNJyXQ9s/ByLhQaJjuBZ4igXwPDAZgnC
8tYCTZ1MC01QtUamKK7R1otrh1TUr6fHwnaXmjY4lrruoqKd1Q==
=sE6T
-----END PGP SIGNATURE-----