A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# REF: https://www.cerebralgardens.com
Contact: https://keybase.io/davewood
Encryption: https://keybase.io/davewood/pgp_keys.asc
Preferred-Languages: en
Canonical: https://www.cerebralgardens.com/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----
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=Xg2V
-----END PGP SIGNATURE-----