A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:info@simaogv.net
Contact: mailto:info@superboring.dev
Encryption: https://keybase.io/superboringdev/pgp_keys.asc
Preferred-Languages: en, de
Canonical: https://simaogv.net/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----
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=RMBQ
-----END PGP SIGNATURE-----