A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Thank you for helping us keep our services secure, we always
# appreciate every report and try to resolve them as soon as possible.

# Our security contact
Contact: https://help.eternalgoth.co.uk/open.php?topicId=22
Canonical: https://www.eternalgoth.co.uk/.well-known/security.txt

# Our preferred languages
Preferred-Languages: English

# Our Vulnerability Disclosure Policy
Policy: https://help.eternalgoth.co.uk/kb/faq.php?id=34

Expires: 2022-06-22T00:00:00.000Z

# Signed and updated: Mon 21 Jun 08:38:16 BST 2021
#
# The key that signed this file can be found in a text record on
# subdomain "verify_gpgkey".

-----BEGIN PGP SIGNATURE-----
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=5ZV2
-----END PGP SIGNATURE-----