A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@cruicky.uk
Expires: 2025-01-07T23:59:00.000Z
Encryption: https://www.cruicky.uk/pgp/5DB38FAACCF619230697808D272ECBEE51C7048E.asc
Preferred-Languages: en
Canonical: https://cruicky.uk/.well-known/security.txt
Canonical: https://www.cruicky.uk/.well-known/security.txt
Canonical: https://mta-sts.cruicky.uk/.well-known/security.txt
Canonical: https://www.services.site-a.cruicky.uk/.well-known/security.txt
Canonical: https://madrona.dmz-lan-1.site-a.cruicky.uk/.well-known/security.txt
Policy: https://www.cruicky.uk/security-policy.html
-----BEGIN PGP SIGNATURE-----
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=riUr
-----END PGP SIGNATURE-----