A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@roguetech.ca
Canonical: https://roguetech.ca/.well-known/security.txt
Encryption: data:application/x-age-public-key,age1gg5ajt9u03fnmqfuqkqwzjwmy2l6cxkyu5lhew6kf8t75j68337qtap4xa
Expires: 2026-06-01T00:00:00Z
Preferred-Languages: en
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQT7pYqbqos0Lmdqp2hrgpNFYSbAEgUCaFMh2wAKCRBrgpNFYSbA
EnZpAPwOisEFZ6zWNLwo5NshyySbhaYx8WB7wTn9XpW8YdsqtAD/ftzYzvz+Gik0
ZfQQ8XSAL9vRzqR7Ze8nuZV9m9I+SAM=
=VaeM
-----END PGP SIGNATURE-----