A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Rocky Mountain Bioengineering Symposium (RMBS), Inc.
# RFC 9116 security.txt

Expires: 2024-07-31T00:00:00Z

Canonical: https://rmbs.org/.well-known/security.txt

# If you would like to report a security issue
# please first read our responsible disclosure policy:
Policy: https://rmbs.org/security-policy.html

# in order of preference the ways to contact us are:
Contact: mailto: security@rmbs.org
Contact: tel:+1-307-637-5711

# We can offer you a swift and proper response in the following languages:
Preferred-Languages: en, fr, it

# Hiring
# We are not hiring at this time

# We do *NOT* use OpenPGP, so please do *NOT* use
# the following key used to sign this security.txt file
Encryption: https://rmbs.org/security_signing-key.asc
Encryption: dns:5d2d3ceb7abe552344276d47d36a8175b7aeb250a9bf0bf00e850cd2._openpgpkey.rmbs.org?type=OPENPGPKEY

-----BEGIN PGP SIGNATURE-----
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=zLf4
-----END PGP SIGNATURE-----