A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@rklab.dk
# Email public PGP key
Encryption: https://keys.openpgp.org/verify/mDG8PwelfhDdI2tzmyAxXz3jldnEpp4RsdExppcFcTZ

# This is the PGP public key that we use to sign our security.txt.
Encryption: https://rklab.dk/.well-known/signature.asc

Preferred-Languages: da, en

Canonical: https://rklab.dk/.well-known/security.txt
Canonical: https://rklabs.dk/.well-known/security.txt

Expires: 2025-01-01T00:00:00+01:00
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEb4CbQzJyoFIWpQW9xGS3b708CHYFAmYO+C8ACgkQxGS3b708
CHYN3hAAlW4UvTHdV3VBGa8OFl/ICXUjbwvDLJUvU1zX4jq1Yn9MNucHo893DzdA
iMNMyJJ+Oq2LjLZjnMVvukryPA5eSN7ju923NdHNDMhNkqI92nCRkxApiD6fMYvM
So3mKr5ASg6f02lFYMqbBcmmWbBTfNaP1Id2RCdM5r3wZ7HLq7tMe2NVUCgTWfV5
WJo3bSYZon3J51cTfsavdxLldVDtPc0JcpJrsHFqq5j1Z/8K5g1lX75Aay283j2/
nVhOiIx050UaZ6xpCOKzuXk+xuonwI58SefQk6B7sNLLvEs5iDA5q1Qgjmh3IjXn
Jh/9KhmFB9zdLfZr9O6Tfklz2UxPgo35xalUirJriIuIjax5uVqrYoqCJMyEnnl4
/l0XptBD7s8dF1qdrEmGoHhci1GtECUt4Scda4z5ve6ywS0qqutq5Ov2Y8VQcd0o
2xvzyqAcEt+Wsm4/qp6dNoy13rRO5tAKS838h3Mbg3R3itz0W7vCreM9lHpOF8Ip
FCTgOI28Fy+/0ZxNvCTNRGiQiSrqmBS12GGDf5TfbFbWf/5IOlq5t/u1V7pwAHbO
wvnj1He5z/iGkz4mgyzjjT7EYDHlydPimX2YroSmgcYtJ8hsd0aETO+NvXjA1P2e
tQbIwC6zahYdv9b7Jsdrd+YmAVR4Q8tho0dbypOLoIJXeL+5pSE=
=34GD
-----END PGP SIGNATURE-----