A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:jens@plyp.com
Expires: 2024-01-09T23:00:00.000Z
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/3CA2C229EC7A8AB0EE98D431AD96F6F572A6D22A
Preferred-Languages: en, de
Canonical: https://www.plyp.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=vppu
-----END PGP SIGNATURE-----