A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

#   ______  __       ___
#  /\  _  \/\ \     /\_ \
#  \ \ \L\ \ \ \____\//\ \    __  __
#   \ \  __ \ \ '__`\ \ \ \  /\ \/\ \
#    \ \ \/\ \ \ \L\ \ \_\ \_\ \ \_\ \
#     \ \_\ \_\ \_,__/ /\____\\/`____ \
#      \/_/\/_/\/___/  \/____/ `/___/> \
#                                 /\___/
#                                 \/__/
#
#  Interested in solving hard distributed and realtime problems, at scale?
#
#  We're looking for great people to join us.
#  See https://ably.com/careers
#
#  And we're looking for expert freelancers.
#  See https://ably.com/experts-network
#

# Our security address
Contact: security@ably.com

# The details in this file are reviewed annually
Expires: 2024-09-05T17:00:00.000Z

# Our security acknowledgments page
Acknowledgments: https://ably.com/acknowledgements

# When submitting vulnerabilities
Preferred-Languages: en

# This file is located
Canonical: https://ably.com/.well-known/security.txt

# Any open positions
Hiring: https://ably.com/careers

# Vulnerability disclosure policy
Policy: https://ably.com/disclosure

# Our security policy is in active development
# please contact us for more information