A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:webmaster@symbol-banging-monkey.net
Expires: 2025-10-29T04:00:00.000Z
Preferred-Languages: en
Canonical: https://symbol-banging-monkey.net/.well-known/security.txt

# These links are all to the same GPG key
Encryption: https://keys.openpgp.org/search?q=webmaster@symbol-banging-monkey.net
Encryption: https://keys.openpgp.org/search?q=8CD3C228B63A8476D504A6DFA3ADF219953970AC
Encryption: https://symbol-banging-monkey.net/publickey.webmaster@symbol-banging-monkey.net.asc
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQSM08IotjqEdtUEpt+jrfIZlTlwrAUCaG7ICAAKCRCjrfIZlTlw
rNX5AQD8q1uzjqb9HwPzJEoWFF7/8u0ufOH+efRCq3mOHLfGFAEApafIlNK10NBy
bzpXHWKzaGmACOUbKow4K2n9iYkzVAA=
=hr3r
-----END PGP SIGNATURE-----