A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@mway.io
Expires: 9999-12-31T23:59:00.000Z
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/58FBAF3836072D13D047DCD8FE514364D09F3C96
Preferred-Languages: en, de
Canonical: https://mway.io/.well-known/security.txt
Hiring: https://mway.io/career/#vacancies
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQRY+684NgctE9BH3Nj+UUNk0J88lgUCZ5OP/wAKCRD+UUNk0J88
lpYHAQDbj2Sn1xtP7M+QxzUl44c9O9K4JUOnTcGaoQXPejnC+gEA3UmJu2Pp332q
aj9GpIuX4ka8/mtVHiZDQz6109IFRAs=
=0hbh
-----END PGP SIGNATURE-----