A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:webmaster@eiscat.se
Contact: mailto:security@eiscat.se
Contact: mailto:simon.brown@eiscat.se
Encryption: https://www.irf.se/pgp/simon.brown
Preferred-Languages: en, sv
Canonical: https://eiscat.se/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=29rn
-----END PGP SIGNATURE-----