A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@wirelesscar.com
Expires: Thu, 31 Mar 2022 12:00 +0200
Encryption: https://www.wirelesscar.com/.security/public.pgp
Encryption: https://www.wirelesscar.com/.security/public.smime.crt
Preferred-Languages: en
Canonical: https://www.wirelesscar.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=TOqJ
-----END PGP SIGNATURE-----