A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@geekyboo.net
Expires: 2025-03-30T20:00:00.000Z
Encryption: https://openpgp.geekyboo.net/vks/v1/by-fingerprint/482309E1EC2747BE01577C2004E6FFBEC81FE7A7
Acknowledgements: https://www.geekyboo.net/hall-of-fame.txt
Preferred-Languages: en, ar
Canonical: https://www.geekyboo.net/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=uuOP
-----END PGP SIGNATURE-----