A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:drewrypope@gmail.com
Contact: https://twitter.com/dezren39
Contact: https://keybase.io/drewrypope
Contact: https://keybase.io/dezren39
Contact: tel:+1-715-255-0552
Encryption: https://keybase.io/drewrypope/pgp_keys.asc?fingerprint=8726cc0d825c48471cd4b219561093dc7b252da3
Acknowledgements: https://securitytxt.org/
Canonical: https://www.drewrypope.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
Version: Keybase OpenPGP v2.0.80
Comment: https://keybase.io/crypto

wsBcBAABCgAGBQJcO6BlAAoJENm+5IzEpCYKUqwIANSm+Ct1y3r9EAiJuTa7bS4a
8YK72QVT+DpZcrkuAvu17SYwaH3bM//w+Sn0w8gwn1FRPyTYo1lpu2OuUEX4f/uX
0VVeGFV0EEzM3PrnH8lVR1bjwcYOz88Z0JBons7IihwjjsKSEFj1Oz4zIcyi/z21
AIzUQ/WlbjECQzaygVIP7253VhNxhM7J6ovvAXOPDqm0p7xuPJiI0n1jVVZXAm7X
B9KpSQLI9h4plJyTTIUF030/wzQnKRsJ7LwwkTM0mjIAEWXZDZ1eBKuBILp3PhFM
fZ3GXs/FDFJAEQwys2hMzp7dXTcLvC5ue9wROHqNc62+XdZjW4Pf1r3fs7z72go=
=nXuH
-----END PGP SIGNATURE-----