A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# JEPA Secure Vulnerability Disclosure
Preferred-Languages: en
Contact: mailto:jernej@jepa.si
Encryption: https://www.jepa.si/.well-known/jernej-jepa.si.pem
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEfXe8fASwiziEEwLHyXk0Udfko4sFAmFJUb0ACgkQyXk0Udfk
o4v5sg/9EpZQq2sjgQsQemQbZpzYtsph9uXBYxehGu26adcbCKzG6q3+0ynIXhRJ
Dyt1b9iVR43ogf2YQyaXCCkyKBESErM68K4L0nLnDcivXFwxzhYu+SaTcx8ZRRXK
l3b0qp/KiKcSSxxcxvHHHl/BdU30hcZnXG3CQitNxoWXkG/IcdhL5jOLpRLJvv2w
RN5Ia1B4RZlsH7CoDalL0GYXwqBJX+XrjQOrR6NIXf+74Ky9cTIUvnnRqD1pH81B
NBkbyb+HSMVB0Zv4irwFL5doP188QoprEOuWtRb9RP2yTaQE83vxlm8M/NNGK84N
b5UT7nPtXAQy3NTj43bPFvYO/6cUz/76wIWeYgqtwicvZV8I2LeytJi49m6FlvG6
dQL5U5rtLCJb/ZzVZyqhwmnegIdtQyKz1vYknU3MITuX65Yu22t3l+9d2WFX/n5I
dM8HbijzNAqPy6G4RkMYStrjnAiNN1jAMtC9O7FWpe+jugah8NEqhdrNO12zudp7
LPtwwuoBpqTyKe9skQ4h3YjR4B7Tww92PH7FnfyI9i5rcFBIXGrr4yz/oKvLtcBG
1eHwDuwQ2bvw+obXEdx0/ur3+ErKI5tcOyG0vOpdZE0dss4xrEfuEZXK662fK/Wg
7cdNKkpnm2V2/UxrnsUZAV69tNf876prFe1IFIsc03Gnvn0cW7c=
=jt7D
-----END PGP SIGNATURE-----