A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

# security.txt file for the https://www.corliss-lamont.org/ site
# which also includes the https://www.corliss-lamont.org/hsmny/ website.
# Reference: https://securitytxt.org/
# Reference: https://www.rfc-editor.org/rfc/rfc9116
# Reference: https://www.rfc-editor.org/errata/rfc9116
# URL of this file: https://www.corliss-lamont.org/.well-known/security.txt
# Please e-mail webmaster@corliss-lamont.org with questions.
# Created Monday, April 3, 2023 by Frank, Independent Consultant, New York, NY

Canonical: https://www.corliss-lamont.org/.well-known/security.txt
Contact: mailto:webmaster@corliss-lamont.org
Expires: 2026-04-03T23:59:59.000Z
Preferred-Languages: en