A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

##################################################################
# A-lehdet                                                       #
# From this file, you can find contact information for reporting #
# possible vulnerabilities in A-lehdet sites                     #
#                                                                #
# This security.txt covers all of the following sites, and       #
# their subdomains                                               #
#                                                                #
# www.a-lehdet.fi and www.a-lehdet.com                           #
# www.lily.fi                                                    #
# www.terve.fi                                                   #
# www.apu.fi                                                     #
# www.meillakotona.fi                                            #
##################################################################

Contact: mailto:IT-security@a-lehdet.fi
Encryption: https://cdn.a-lehdet.fi/pgp/alehdet.asc
Preferred-Languages: fin,eng



-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEExuxxpdx8i6k9m9AiYjR9zhtiT90FAl9bZGgACgkQYjR9zhti
T90/6gf/QNTDzsB7fDaJvEPniHl75795VYqM8VFJ005IOEnQyuKGS772YcfOjud7
ebUjQ2Z4XnV/RBCBq4i6kgELpWHrvnBOmCVLOZTkXFSPaR7WovDz5slE66dbUAK2
Uc/CWLXR2Em0HEQCnRC4lhoBUhhC3lfSi7xEornPzZkby4uOh1yZ0zfFWtEDpD+W
Qp+YdkAz3aMglq8lQQsFT3XqOM/GTx0JnqlPsVL6u2tmCl3PWwSwza6OiY8ODK0O
tDh082BAyHCX3hoaaFZE0QzF1ds64oe4oipuhs5ODp3stXjvW+7n7QD/600BhpUF
g0qCb+j5BAk08k9GTiWS184f8J64PQ==
=dSQ9
-----END PGP SIGNATURE-----