A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@inspire.net.nz
Expires: 2025-12-31T20:00:00.000Z
Encryption: openpgp4fpr:5d8209d430b5774259a19a48bf2fdd9ad9128f0c
Preferred-Languages: en
Canonical: https://www.inspire.net.nz/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=41i9
-----END PGP SIGNATURE-----