A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: https://www.hodgepigs.org.uk/.security-contact.html
Expires: 2027-01-24T01:00:00.000Z
Preferred-Languages: en
Canonical: https://hodgepigs.org.uk/.well-known/security.txt
Canonical: https://www.hodgepigs.org.uk/.well-known/security.txt
Canonical: https://mail.hodgepigs.org.uk/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----
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=j1lO
-----END PGP SIGNATURE-----