A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://www.alphachat.net/.well-known/security.txt
Expires: Fri, 1 Jan 2038 00:00:01 +0000

# Our security address
Contact: mailto:aaron@alphachat.net
Encryption: https://www.alphachat.net/pgp-pubkey.txt
Encryption: openpgp4fpr:97D58E607188C8C986481CB76A2F898000519052
Preferred-Languages: en

# Our disclosure policy
Policy: https://www.alphachat.net/security-disclosure-policy.xhtml

-----BEGIN PGP SIGNATURE-----
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=s0CY
-----END PGP SIGNATURE-----