A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@emgag.com
Encryption: https://www.emgag.com/security.pgp-key.txt
Preferred-Languages: en,de
Canonical: https://www.emgag.com/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----
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=eW7M
-----END PGP SIGNATURE-----