A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: security@zonarsystems.com
Encryption: https://zonarsystems.com/.well-known/zonar_security.asc
Preferred-Languages: en
Canonical: https://zonarsystems.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQJOBAEBCAA4FiEEyg+1y/lPyEARZ9BIKRaqF3tCX54FAl34LQAaHHNlY3VyaXR5
QHpvbmFyc3lzdGVtcy5jb20ACgkQKRaqF3tCX55DuA//bLz7rbkOrMMKjjOEMXuJ
8KYvmZtvHGIaGrUejPpp1Gd7CDIStJ5qDsNr6Ek0LZrIB9yO3w7goXmQwZ0sLc9J
vjJcu98zPOoEqJ+mHrt4s0S5YyQtOmA74sniHhwflorltUKvmLInN98Ra4w0sMnA
tger8knYM5nlXua/m4ESJCsAdym+HwsXkEJG/D9jeKMbc661qjpcB2jh0GEqfzKe
3B7ZLxxUH7E7A4iGgR9L70bdq3C+cnmQjRzinYxwKPH850eNR4xcHY9tAyGY9oFE
RjBli3/8tC3eCxm2b/lu9qIo1mxMmHcPArwxEoe24qFL9HbM20Lq1qUlxgeF7Hwf
6j3xuSgzzq5dpkohfa2u8oLxMcNcODGTF6fY5TyK+M4mz03vvXfg7/IXAwNQG13W
pM9wOMQjt8QwryY51Ra/SsJdN5rRQmM4XlRox/uAWWsGG44cjxUB13IR9wcwmdyk
BG1+WShTqNppoTKR2V1F7l++7V1EgqoexATrkF0roTUonQ7KglTKV2zj3uTHNIhx
Qon8s6y8ldKsKbRpmLB1WYty2gTlt4KYg0DRRYV8Ls6e/NiGZGCYyNYEEoojiEl2
+AMhT3n7R6PEKll6S/ImqwKv6cbRiSEY2MiOiY8OJWPSWBc4O73VmlOXoHmVAh/f
kt6il6WHnCuJyqOsZIZHtQw=
=8w1L
-----END PGP SIGNATURE-----