A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@hemnet.se
Encryption: openpgp4fpr:015BF27B03B429A9BA52FA74FFB79C20163F15CD
Preferred-Languages: sv, en
Canonical: https://www.hemnet.se/.well-known/security.txt
Hiring: https://jobba.hemnet.se/jobs
-----BEGIN PGP SIGNATURE-----

iQFHBAEBCAAxFiEEAVvyewO0Kam6Uvp0/7ecIBY/Fc0FAlziX6cTHHNlY3VyaXR5
QGhlbW5ldC5zZQAKCRD/t5wgFj8VzfV1CACZylttydJPM4yN9ZZ5ZKxcrUw6QSJA
4nNwgrnxsRzLIZnIv/GDuIjiEqNrqR/HztFiyrvLCfViE9GvMZq/w3oXivIduIyD
TnP5roClzsIdd/tz1YnXOXVw9mK5MF2uX5U00c8kw3b47LoFNSpKsCJpooIS0Yf0
/BF2SpZoGgUCASvf3tW0py8wxb52/aVBQb8kDxotmmYO+9H9o00rv26S1dZSPLj7
74kLZRcF1HVplX9GsWxwW6AklsQu8HThI4aMlUn8VuFKdVw9xg/qVG/N/4x7W6S5
Imn1QwYqDMriEIyjLI94FuvGeznc6xmvQHvJNYPMsCR1PXHc2USC9Qjy
=54m6
-----END PGP SIGNATURE-----