A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# REF: https://www.kitchensync.pro
Contact: https://keybase.io/davewood
Encryption: https://keybase.io/davewood/pgp_keys.asc
Preferred-Languages: en
Canonical: https://www.kitchensync.pro/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----
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=IH5W
-----END PGP SIGNATURE-----