A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN SSH SIGNED MESSAGE-----
Canonical: https://nyantec.com/.well-known/security.txt
Contact: mailto:mvs@nyantec.com
Encryption: data:application/x-age-public-key,age1dexxdduwl37hsfdxde6le0satatrfv4geva0cxt8qqw3n46vgavsanuewp
Preferred-Languages: en, de
-----END SSH SIGNED MESSAGE-----
-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAAEoAAAAac2stc3NoLWVkMjU1MTlAb3BlbnNzaC5jb20AAAAgJzM8dH
Bj0wDAMaVwHRCAw4mNyksmFVTdyi+tb1EFLrYAAAAEc3NoOgAAAARmaWxlAAAAAAAAAAZz
aGE1MTIAAABnAAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAQBgSPr+p0Yiym2
0FeHFAbsNy20WGXjsQKURjdIB1SGmJVBJDNdtOzCjLReMPipvCXgifMy7HVpDYwycMhAaO
EwEBAAANEA==
-----END SSH SIGNATURE-----