A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@etnetera.cz
Expires: 2025-05-05T00:00:00.000Z
Encryption: https://security.etnetera.cz/keys/security.etnetera-pubkey.asc
-----BEGIN PGP SIGNATURE-----
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=ExJk
-----END PGP SIGNATURE-----