A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Archivo security.txt para jarscr.com
Contact: mailto:alfredo@jarscr.com
Contact: https://www.jarscr.com/seguridad
Policy: https://www.jarscr.com/politica-seguridad
Encryption: https://www.jarscr.com/pgp-key.txt
Acknowledgments: https://www.jarscr.com/hall-of-fame
Hiring: https://www.jarscr.com/jobs
Expires: 2025-12-31T23:59:59.999Z
-----BEGIN PGP SIGNATURE-----
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=oH9j
-----END PGP SIGNATURE-----