A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@safetyculture.com
Preferred-Languages: en
Encryption: https://safetyculture.com/pgp-safetyculture-security-public.asc
Canonical: https://safetyculture.com/.well-known/security.txt
Policy: https://safetyculture.com/security
Expires: Sat, 11 Mar 2023 13:37:00 +1000

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEuXDgkvaxlv6gLaGRWBceUG+CPjoFAmBRQJsACgkQWBceUG+C
PjqTFxAAhG0GO4OF4stEDUIHJhM6aJOIpa2st4g65ACId2hcBVKB8qopgi+HYSHP
cVmsCeW7fKabVy6+rerTIYikzfAj8xmWju3Sw1iYijjxUTWinD7JYlMyHV9F7c4r
hrr+Iz0hNmH6Onci1jDwM6RnnbBtqShQIUMyLe7BARGIiUnMM0JZFzaH15YyZcxf
EkFFAwvjJqIao6w4pSl0BtlGWhGtIEdvYxE580B6ZW+2+s+hpeDPtqH0kDtqnZUb
adyob7nqViTcc8GjlEle04NWetq9X3UDQL08sx7HvQuJTldwEonHzyZfpZL/12sm
gX7uRFMy16fMy6rPYRmOAVttz6pZNAhYH6HHhAb08mTT+1HV2p0IAnq2pOQB40yQ
Ckp/6wcpKp84GxP0YnOF6ufXgvxVhtuW36oBS5+u0fWI4+Zwzm+XfVUM6ZKkA/DS
Eaf7tgnBL34EhnvwtFI45RO2+YKNeLSA4gk870VJoRlus7mQlt5pet6zawycywia
AcxEM7HnRSG4JeCt7fksNuRn/rBXSdBaMf6ZNHsz3S3rSlNqseZqT32Qt4e8Y9Dn
fpLoQDxOpBbpmEXNhB9oGMCiZDyjdL8RZPdfqWS+dXkNi5nz5S+lNSvRX1ioW3ds
X+1bzd99oWN+x+CuRziWDhgSTf86oSQ1gq4doDz9cvxZvnkJA/w=
=1Jeo
-----END PGP SIGNATURE-----