A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@tosibox.com
Expires: 2026-01-21T21:59:00.000Z
Preferred-Languages: en
Canonical: https://www.tosibox.com/.well-known/security.txt
Policy: https://www.tosibox.com/information-security-policy
Encryption: https://www.tosibox.com/.well-known/security.pgp.txt
-----BEGIN PGP SIGNATURE-----

iQJJBAABCgAzFiEEdLr1NGaTmkTES5Sjx3iyRmIxgHUFAmeQqBsVHHNlY3VyaXR5
QHRvc2lib3guY29tAAoJEMd4skZiMYB15TgQAIHieHItM7faGdlTehWNJCRVELyB
MRsg53+bHADRU3xvX7SBZ2NBsFGbp1yyLduD2AofVkoFX3v5dvNvwVdeh4pN7FFF
+TUAB353mveGsoSFpj9yHzaFY9PJseiHy0QUOfQOetQPCfqHCeRyBKYE5eqXxuNc
gHWM0ymI4/2F2ye5eZ/ECo7WGFkPxzvAzCHOCJgdaiuMM+XwZtcBvWg2oglNO6eg
f84COXyE+ee9toEKJhKoOxiriODLfvAZ8Ol5mfuTXWpPPL2eYonASQGTOFOFd5F2
y9cOyeje5WngOJGHTG4TocP293rhWPFUEN6bqX9+iMx11uqN+eK90NCSXSrZFJy/
aHxycLDZUrysmNPlqjkMvXhTvqLh1oFmxdyltIC/D+9dT34zIVrkHK2cwE/pMPIu
sLTTboFdi9M7AwPTk5XD2kEzF0hOCleZqa2Tf+nrCHoiEKEJ6ED60JPVWE3xGs54
jyXtXvpihFFHc23uPqdRir/uKHiBH5jwvnkx66nvGLCYSt/S79e8JhLFxu+wyVTn
PvvcILgLe3RptABK1hCFIjnRmGU5oPvl4860lVcP4CBkYlqaXi9d09YMrkx9hun5
aYn7v7J7qQkejLDSc/mKHUeDml4B5Jcj42XnzNCZD5pGIE01rJAVG+SOmS8QVLkV
zA/NEoUoY1U8+7aU
=y2wh
-----END PGP SIGNATURE-----