A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@docnow.ai
Encryption: https://docnow.ai/pgp-key.txt
Acknowledgments: https://docnow.ai/security/acknowledgements
Preferred-Languages: en
Canonical: https://docnow.ai/.well-known/security.txt
Policy: https://docnow.ai/security/vulnerability_disclosure_policy
-----BEGIN PGP SIGNATURE-----
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=s8C+
-----END PGP SIGNATURE-----