A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Canonical: https://rondano.com/.well-known/security.txt
Expires: Thu, 10 Mar 2022 16:13:58 EDT

# This web site is hosted by Vectro Networks.
# We do not control the content of this web site.
# For major security issues, please encrypt an email to me:
Contact: mailto:ccogle@vectro.it
Contact: tel:+1-203-648-4439
Encryption: openpgp4fpr:28D750EE5C6EBA486A490601F0F59242F96836A0

# You may also contact their IT support team.
Contact: MSTeams:/l/chat/0/0?users=bfranco@vectro.it,ccogle@vectro.it&topicName=Rondano%20web%20site%20security%20reporting
Contact: https://vectro.it/contact-us/

Preferred-Languages: en
-----BEGIN PGP SIGNATURE-----
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=kVCK
-----END PGP SIGNATURE-----