A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:contact@brzozowski.io
Expires: Wed, 20 Apr 2022 00:00 +0200
Encryption: https://www.brzozowski.io/pgp-key.txt
Preferred-Languages: en, pl
Canonical: https://www.brzozowski.io/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----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=DiqC
-----END PGP SIGNATURE-----