A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# About this website: Anyone can easily create a homepage with https://bt-web.com/
# Date created: 2025-03-10T08:20:38+09:00
Contact: mailto:rfc9116_security_txt@bt-web.com
Expires: 2025-08-07T08:20:38+09:00
Encryption: https://bt-web.com/.well-known/pgp-key_ma-cw.cyou_20250310.txt
Encryption: https://btweb-demo.com/.well-known/pgp-key_ma-cw.cyou_20250310.txt
Encryption: https://btweb-demo2.jp/.well-known/pgp-key_ma-cw.cyou_20250310.txt
Preferred-Languages: ja, en, zh
Canonical: https://ma-cw.cyou/.well-known/security.txt
# coming soon...
#Policy: Policy: https://example.com/disclosure-policy.html
#Hiring: https://example.com/jobs.html
#Acknowledgments: https://example.com/hall-of-fame.html
-----BEGIN PGP SIGNATURE-----
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=KjYX
-----END PGP SIGNATURE-----