A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@storedsafe.com
Preferred-Languages: en,sv
Encryption: https://pgp.circl.lu/pks/lookup?op=get&search=0xAE1B72FC044A996B
Encryption: https://pgp.circl.lu/pks/lookup?op=get&search=0xAD71D8C663BB5449
Canonical: https://storedsafe.com/.well-known/security.txt
Expires: 2024-02-05T18:47:07.559Z
-----BEGIN PGP SIGNATURE-----
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=XK2I
-----END PGP SIGNATURE-----