A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@eckmul.net
Preferred-Languages: en, fr
Canonical: https://eckmul.net/.well-known/security.txt
Expires: 2051-12-31T18:37:07.000Z
-----BEGIN PGP SIGNATURE-----
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=0rwa
-----END PGP SIGNATURE-----