A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@chief.app
Expires: 2025-10-10T00:00:00.000Z
Canonical: https://chief.app/.well-known/security.txt
Encryption: https://chief.app/.well-known/security-pgp-key.txt
Preferred-Languages: en, nl
-----BEGIN PGP SIGNATURE-----
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=gfw9
-----END PGP SIGNATURE-----