A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:derhansen@gmail.com
Encryption: https://keybase.io/derhansen
Preferred-Languages: en, de, da
Canonical: https://www.derhansen.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=qUOc
-----END PGP SIGNATURE-----