A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



Canonical: https://www.action1.com/.well-known/security.txt

Contact: mailto:security@action1.com

Preferred-Languages: en

Encryption: https://www.action1.com/action1_security_public_42d01cf9.asc

Expires: 2025-11-01T00:00:00.000Z

-----BEGIN PGP SIGNATURE-----



iQGzBAEBCAAdFiEEvPhqYbV+l/EjtQuZVyUV20LQHPkFAmgPcMwACgkQVyUV20LQ

HPk2rQv/dxkSnSIgolxRN9qd8svgBKHwmouBILekBDL6XKapUpA1YwfSsAoKP5wj

q6t3MogdNx2WLx0eX0oHLIQf1ePoiDJQGYH32OBdW8rdjMfSstvZpnXUkddJa3Jx

YlnWzcVrxqsQxV6Jn3vx2WJ+RjjW0oyH7wi2tEkVt6cO5tkCvy4Jx5nhZcQEZZwt

F5IfdcyDSEF1tEii2xH1uQrNln/00Z1Y+1kcLe/Y/ofJis+vRUbj3Qao+fT0vnEN

28Ga4eMEoDjsxeB5FJrSCmhFhx/oz6v/yArRbIk7Bizn9FbKKRNw/7SAyApuDqS9

Z7K6AvhDSS8XDmRoollMoh8sh6JQIjWyxD/Ik22rw7K+2O3sI1YHywTqA2nlc+Ne

yM1deZgxLmdm+tXaGkgpAks8ecWSyG9DPP0Tu26JSv9pxVnrqnNETjTibl1qGrw4

+NZPjuVm2LQ+pQQ62BtUrf2S1RnfUruEEVQSCq4UzkWdWDMYRF2vcdbWJw2dpiph

WBJNc6YJ

=gtF8

-----END PGP SIGNATURE-----