A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:eric.pruitt@gmail.com
Encryption:  https://www.codevat.com/pgp.asc
Preferred-Languages: en, es
Canonical: https://www.codevat.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=hKRA
-----END PGP SIGNATURE-----