A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:postmaster@livingthedream.nz
Canonical: https://laughingpukeko.co.nz/.well-known/security.txt
Preferred-Languages: en
Encryption: https://laughingpukeko.co.nz/publickey.txt
Acknowledgments: https://laughingpukeko.co.nz/thanks.txt
Last-Updated: 2024-03-01T00:00:00+13:00
Expires: 2025-03-01T00:00:00+13:00
-----BEGIN PGP SIGNATURE-----
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=yE98
-----END PGP SIGNATURE-----