A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@leonardini.dev
Encryption: https://github.com/LorenzoLeonardini.gpg
Preferred-Languages: en, it
Canonical: https://tapandfish.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEAVfQ5n6V6I0DA1llLL3s7KVD+vkFAl7/fKcACgkQLL3s7KVD
+vlwjA//Y2ZcH7U6Wy5perAeLFkVNCMQWM4YegBmzdIi60sGTJI+WW1p9uJtPxDc
bW3DApB9YZRFmeLvTApLY3LzCSaxMyuUvHsxZ3TBNNI1LCdzf2vuzneNz+sdAt+o
8YhswnubCSSzmqukHZXvqU3657hlaM+gfx2NMvpbC7eC9MIzJBT12gdcanMNv8L8
FIqATzXkmEzZpebIcgnb7v8RFVKJtyX3t8DwHvCMOfplcNYU9SlGpwvvq6UoXbh0
29qFIJSSqN1+NJEx02UKCZHHZofMNTHq9Zey48hcA6VrrzS/PGFsjOcyoptKD8A5
xK7bkQ+CDry5SSfbmBX8HJ2QXiJLUpTekXbNewhuEiLZ7TwZ8EcdV+j5X9S30XVV
2XqyB2ZzoRYCajzBBV7sb727pDqlbyYOSy0neaG6pP0plWHS+7YYmDN1i4CfDL/s
w6A37dsvgWp9zw4SHdeaaBVo0q7GGRurGa0CwKGOjrBwuZvEP4pSrJXtQ3nG7S4N
ZoPcAJ5QkBgZCbLezK2JWsi4QiOuZFRkpFOF8POMwGGk2asuuG+4HbviHwlqEYjQ
Et8xbVR6Ffaf2duCCCAmhM4m7th2Dd0GPS3lyuIxg/4ueewOcgOqrIaV5QkX71H/
JFs3P6MCer5aa5JPRg6xzA3a1b4UuxHgJ7GoY8AOFdHqaJHo35Y=
=/3J0
-----END PGP SIGNATURE-----