A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# security contact
Contact: mailto:security@hardill.me.uk

# PGP key
Encryption: https://www.hardill.me.uk/security.pgp.txt

# Canonical Locations
Canonical: https://www.hardill.me.uk/.well-known/security.txt

# Languages
Preferred-Languages: en

# Expires
Expires: 2027-07-27T12:00:00.000Z
-----BEGIN PGP SIGNATURE-----
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=RVyL
-----END PGP SIGNATURE-----