A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# security.txt para conectrj.com.br
Contact: mailto:ti@conectrj.com.br
Encryption: https://conectrj.com.br/pgp-key.txt
Acknowledgments: https://conectrj.com.br/acknowledgments.html
Preferred-Languages: pt, en
Canonical: https://conectrj.com.br/.well-known/security.txt
Policy: https://conectrj.com.br/security-policy.html
Expires: 2026-04-28T15:52:56.000Z
-----BEGIN PGP SIGNATURE-----
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=Vosk
-----END PGP SIGNATURE-----