A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:freedom@anarchypages.com
Expires: 2027-05-08T06:00:00.000Z
Encryption: https://anarchypages.com/keys/freedom.asc
Preferred-Languages: en
Canonical: https://anarchypages.com/.well-know/security.txt
-----BEGIN PGP SIGNATURE-----
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=B8pn
-----END PGP SIGNATURE-----