A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# If you find a security issue, please report it. Thank you.
#
# See <https://securitytxt.org/> for more information about this file.

Contact: mailto:writer@owenh.net
Expires: 2026-02-01T00:00:00.000Z
Encryption: openpgp4fpr:5665B553DF57C4992A1EDFF0A8E5D72892601607
Acknowledgments: https://owenh.net/credits#security-disclosures
Preferred-Languages: en
Canonical: https://owenh.net/.well-known/security.txt
Policy: https://owenh.net/terms#security-policy
-----BEGIN PGP SIGNATURE-----
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=tdcA
-----END PGP SIGNATURE-----