A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:root@rakete.xyz
Encryption: https://rakete.xyz/contact/root/keys/
Contact: mailto:inquiries@rakete.xyz
Encryption: https://rakete.xyz/contact/inquiries/keys/
Preferred-Languages: en, de
Canonical: https://rakete.xyz/.well-known/security.txt

# Note: This message was signed using the key at https://rakete.xyz/contact/root/keys/root@rakete.xyz_0x8CEE077B_public.asc
-----BEGIN PGP SIGNATURE-----

iLkEARMKAB0WIQRXnI8JVo0YRVoKenkgflm/jO4HewUCYA4CFQAKCRAgflm/jO4H
e3bjAgkBKF0m7EOS0HtfmTEtvU05ibzFl3QXREZdY9HoOFvZ6MX6lrCHc2SEw0sT
4OGwe+2xIdXCBNShszWUrIfQFQfaLLECCQHSOY/TJXkmuy9ibWiCWauutxhxqKSZ
AJ+wfFuZyiAKUvt6WBKzrgjgNjtygkZXOSJxTJ2V8EZyRBMRIW3W8BMy9w==
=WXzo
-----END PGP SIGNATURE-----