A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://tsavobaby.com/.well-known/security.txt
Canonical: https://www.tsavobaby.com/.well-known/security.txt
Contact: mailto:websecurity@sasahivi.com
Encryption: https://sasahivi.com/pgp-public-key.txt
Expires: 2025-10-18T23:59:00.000Z
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQTpGQZVsZX7gz9L1wGqI3Ie6JYU1wUCZJx9UQAKCRCqI3Ie6JYU
1wLuAP9PnxlUggEUQyfS2pHAnmInkNDj5eb7gFQl9D4o5L+LmQD+ISBs6M0RxqsT
/TsSkWhLjkq8Zvfw1tXhZqtTyNdXUA4=
=oCdW
-----END PGP SIGNATURE-----