A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

#    ___      __  __          __ __    __       ____                 _ __      
#   / _ )___ / /_/ /____ ____/ // /__ / /__    / __/__ ______ ______(_) /___ __
#  / _  / -_) __/ __/ -_) __/ _  / -_) / _ \  _\ \/ -_) __/ // / __/ / __/ // /
# /____/\__/\__/\__/\__/_/ /_//_/\__/_/ .__/ /___/\__/\__/\_,_/_/ /_/\__/\_, / 
#                                    /_/                                /___/  

# Thank you for visiting BetterHelp's security.txt.

# Please submit security issues directly to the security team here:
Contact: mailto:security-reports@betterhelp.com
# For non-security issues, please contact us at https://www.betterhelp.com/contact/.

# You may choose to encrypt your message to us with our OpenPGP public key.
Encryption: https://www.betterhelp.com/.well-known/security-report-public-key.txt

# If we are hiring for security related roles, they are posted here:
Hiring: https://www.betterhelp.com/careers/

Canonical: https://www.betterhelp.com/.well-known/security.txt
Preferred-Languages: en
Expires: 2025-07-01T13:37:00z
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQTTVBs1MGCh/4Z0qNb0AcHWNUy1pAUCZ04yHwAKCRD0AcHWNUy1
pDowAP0RwNYvdK5yiM3yMUe/cz3lJfLBHD5/3dcBz64ovIPXGgD/cjgfFy5yTZYX
G01jQgQeMJR/I5yGSlcOwbKAX5Bvkgg=
=QSY8
-----END PGP SIGNATURE-----