A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Vestibular Technologies, LLC
# RFC 9116 security.txt

Expires: 2026-06-03T00:00:00Z

Canonical: https://caps.equipment/.well-known/security.txt

# If you would like to report a security issue
# please first read our responsible disclosure policy:
Policy: https://www.vestibtech.com/security-policy.html

# in order of preference the ways to contact us are:
Contact: mailto: security@vestibtech.com
Contact: tel:+1-307-637-5711

# We can offer you a swift and proper response in the following languages:
Preferred-Languages: en, fr, it

# Hiring
# We are not hiring at this time

# We do *NOT* use OpenPGP, so please do *NOT* use
# the following key used to sign this security.txt file
Encryption: https://vestibtech.com/security_signing-key.asc
Encryption: dns:5d2d3ceb7abe552344276d47d36a8175b7aeb250a9bf0bf00e850cd2._openpgpkey.vestibtech.com?type=OPENPGPKEY

-----BEGIN PGP SIGNATURE-----
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=ZG9l
-----END PGP SIGNATURE-----