A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@slite.com
Encryption: https://slite.com/.well-known/security-pgp-key.txt
Acknowledgments: https://slite.slite.com/p/note/C8E8g9PGf6UaQaUiF5ULM4
Preferred-Languages: en, fr
Canonical: https://slite.com/.well-known/security.txt
Policy: https://slite.com/security
Hiring: https://slite.com/jobs
Expires: Fri, 31 Dec 2021 12:00:00 +0001
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEE9QmM3NI3F91e9TmJBItUVvCpd0AFAl++fXsACgkQBItUVvCp
d0Bamw//YU4orFgt+T9R4nxQeDAeSwXzwespc4nToRfu3h346z4FVgm2sdDhGRBV
RwC0zsgLCWu4ZhB90gSy+M581RpY/sj5l15EwuJLprcmwVO6Gvysm4NJE22iphwH
gIyMjW319bUJvnGQSKzTbNlKsQQ6KaKRmpnuGs5HDu0LzsJtB6v1wneYTHe3E2L4
IXdPgXGF7KLmu7gMKVfFZ3qSMKCJltZ5SYfe+XcDvn8WoV1LboEwEOPWdCE5UWjc
mgBxId4wIfrmpMCuyF5a8RTLpvr33xsf8qONqeLcXSgLVeDVK+ovmKdwKxL+iTG4
b5wgm0OPaID8YTrTqIxBEgiryJdjdubhagKJN4OXI7JQnso8OcKVq3Py6/sw3wcT
0T5dm8497CDhpNi7fNruHwHirFszFArKkJKFamhY5f8ee8YhE0bKV6sWrwJ6WqX9
MEwnooWWVk0HWbCb7pisDULC1vtMFuUedjcLP2DoFy7ftwLBgsPmVmK+FAifhLzO
D118UQv9tgra/A0600zNCZstiDtwLvDA5AnhsbAyPynRJA5BEjfm3nNz6jFTtUIC
TTGUHOo4BxZmkAkGbpZAm1y/ttuXVlmSaeat79d1jXzf/epThxtRrlKzQg0qeu18
jO5OM0nkRlpP27h75dUBFlgJjBmxZKBrzeWkq+OCMOv8VUDEPFA=
=vkYG
-----END PGP SIGNATURE-----