A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:info@leafclick.com
Encryption: https://leafclick.com/certs/info-leafclick.asc
Preferred-Languages: en
Canonical: https://leafclick.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=/+UY
-----END PGP SIGNATURE-----