A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:support@netreach.me
Expires: 2023-01-08T23:00:00.000Z
Encryption: https://netreach.me/pgp-key.txt
Preferred-Languages: en, cs
Canonical: https://netreach.me/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=JYhV
-----END PGP SIGNATURE-----