A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Expires: 2026-02-14T14:46:20.619219
Canonical: https://simplisafe.com/.well-known/security.txt
Canonical: https://simplisafe.co.uk/.well-known/security.txt
Contact: mailto:security@simplisafe.com
Encryption: https://keys.mailvelope.com/pks/lookup?op=get&search=security%40simplisafe.com
Policy: https://support.simplisafe.com/articles/alarm-events-monitoring/how-do-i-report-a-possible-security-issue-in-the-system/6344792c8e3e4c348d43ebde?lang=en_US
Policy: https://support.simplisafe.com/en_GB/articles/alarm-event-monitoring/how-do-i-report-a-possible-security-issue-in-the-system/6344792c8e3e4c348d43ebde
-----BEGIN PGP SIGNATURE-----
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=KYEr
-----END PGP SIGNATURE-----