A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:sa@zope.org
Expires: 2025-12-31T23:00:00.000Z
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/58953097A0766883E1E5CADE8F50F4EDFE19F27A
Preferred-Languages: en
Canonical: https://www.zope.org/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=FLnW
-----END PGP SIGNATURE-----