A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: https://registraid.com/who-we-are.html
Expires: 2026-08-05T23:00:00.000Z
Canonical: https://hoe-zo.registraid.com/.well-known/security.txt
Encryption: https://hoe-zo.registraid.com/.well-known/gpg.asc
-----BEGIN PGP SIGNATURE-----

iIoEARYKADIWIQRFgKl5CrwnnshOOHZr5nIKHYyyKAUCaJMJBhQcZC5odWlzbWFu
QGhvZS16by5ubAAKCRBr5nIKHYyyKIbFAQDP9GE3Zn1tDRzadEb0vk60DW/H37xs
lZnT0Fk+fwSvjwEAoKe4POYuXvyPNbWeIEZGdb9qmQd4TYg4olFP5mEjXw8=
=ydzh
-----END PGP SIGNATURE-----