A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@synology.com
Contact: https://www.synology.com/support
Contact: tel:+886-2-2955-4000
Contact: tel:+886-2-2955-1814
Encryption: https://www.synology.com/security/DA33F457.asc
Acknowledgments: https://www.synology.com/security/bounty_program#acknowledgement
Canonical: https://www.synology.com/.well-known/security.txt
Policy: https://www.synology.com/security/bounty_program
Hiring: https://career.synology.com/HQ/
Preferred-Languages: en, zh
Expires: Sun, 30 Jun 2024 23:59:59 +0800
-----BEGIN PGP SIGNATURE-----
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=dhtq
-----END PGP SIGNATURE-----