A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@venntro.com
Preferred-Languages: en
Encryption: https://security.venntro.com/.well-known/venntro-security-public.gpg.txt

# We recommend encrypting your message where possible, however please do so with an ASCII armored email body.
# Our mail system doesn't handle PGP-MIME well.

Canonical: https://security.venntro.com/.well-known/security.txt
Hiring: https://www.venntro.com/careers
Expires: Mon, 22 Nov 2021 12:00:00 +0000
-----BEGIN PGP SIGNATURE-----
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=v7jQ
-----END PGP SIGNATURE-----