A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:jason@bloggs.xyz
Expires: 2025-04-20T13:17:00.000Z
Encryption: https://www.bloggs.xyz/pubkey.asc
Preferred-Languages: en
-----BEGIN PGP SIGNATURE-----
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=6QlC
-----END PGP SIGNATURE-----