A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@blockscape.network
Expires: 9999-12-31T23:59:00.000Z
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/6F726898B9D7A92AB1695F924858E46C7F386B87
Preferred-Languages: en, de
Canonical: https://blockscape.network/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQRvcmiYudepKrFpX5JIWORsfzhrhwUCZ5OngAAKCRBIWORsfzhr
h8YvAP9PqNxofiukPjuujKV4JKocRX2u37S9QUZCROJHw8WF4QD+Mz8wSsvXD2ai
Y79oNAXb9LZ3zr9hZNkRQCsnMkFwGAg=
=bSnD
-----END PGP SIGNATURE-----