A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@smarthr.co.jp

Expires: 2025-01-01T00:00:00.000Z

Acknowledgments: https://smarthr.jp/security/

-----BEGIN PGP SIGNATURE-----
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=jhmW
-----END PGP SIGNATURE-----