A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:me@jaysee.ca
Expires: 2023-01-01T07:59:00.000Z
Encryption: https://jaysee.ca/pgp-key.txt
Preferred-Languages: en
Canonical: https://jaysee.ca/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=DRXw
-----END PGP SIGNATURE-----