A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Canonical: https://logbox.co.za/.well-known/security.txt
Contact: disclosure@labs.epiuse.com
Preferred-Languages: en
Encryption: https://security.epiuselabs.com/epi-use-labs-security.asc
Policy: https://security.epiuselabs.com
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEB1XGanEDqHCHOoDFSZgQBTFyBHkFAmDHJyUACgkQSZgQBTFy
BHkuQgf8DEJuUrBc7DqNC9sNA4qyF6rh7i/3ntFINXKftZWM8XKzg+tJ6SSbHy09
Na0vyb8rArkUuF4tztnOxAx1uyv3Wa0TKO1Cj/099FgXBkrCeaKPNhrIJxEqNJ4I
gcJIkwAh0vk3I8Shq/YFb8Sf8PDJ8ZqOdjIUH+TZUFU2RqCyCndgAYBkkmQZp6jR
jvU/shaX4Eb5GZd7sKQUyOwJv2RB5ygtGklwg2aw/ujkO+TQYJ0t9el3GRcTW73b
n3qNHYnH/o9y7ixr+ME6L4CHz6VjhsbADNqjxF2bydvr9RrYik+8iDyny10apOk2
ON6MQbTfH5cwE+x8CrtCBGhwC7N32Q==
=VAJb
-----END PGP SIGNATURE-----