A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

  ######   ######   ######   ##         ######     ######
##       ##      ## ##    ## ######## ##      ## ##
  ####   ########   ##    ## ##       ##      ## ##
      ## ##         ##    ## ##       ##      ## ##
######     ######   ##    ##   ######   ######   ##

Contact: mailto:soc@sentorsecurity.com
Encryption: https://www.sentorsecurity.com/.well-known/openpgpkey/hu/izo2Coih8Pheiyeemaed1pheejei2rei
Expires: 2027-06-12T09:00:00+01:00
Preferred-Languages: en,sv
Canonical: https://www.sentorsecurity.com/.well-known/security.txt
Policy: https://www.sentorsecurity.com/responsible-disclosure
-----BEGIN PGP SIGNATURE-----

iHQEARYIAB0WIQTD3FZLEtkgbhEWD1AnKT4H6qNVJAUCZ6tSoQAKCRAnKT4H6qNV
JIeYAP9isNoMpu7u/BKD+IDRuuZwmdrrP/BJBO0jWEjwWHj5NQD4yo7xSgghoEl6
Fv42nHKUSnb6FPxM08pQ92v0waoIDQ==
=giep
-----END PGP SIGNATURE-----