A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: https://federacy.com/level365
Contact: mailto:security@level365.com

Encryption: https://www.level365.com/gpg/security-at-level365-pubkey-2FA5F620.txt

Preferred-Languages: en

Canonical: https://www.level365.com/.well-known/security.txt

Policy: https://federacy.com/level365

-----BEGIN PGP SIGNATURE-----
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=lShp
-----END PGP SIGNATURE-----