A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:ondrejj@salstar.sk
Encryption: https://www.salstar.sk/gpg/pubkey.gpg
Signature: https://www.salstar.sk/.well-known/security.txt.sig
Canonical: https://www.salstar.sk/.well-known/security.txt
Canonical: https://salstar.sk/.well-known/security.txt
Preferred-Languages: sk, cs, hu, en
Expires: 2025-03-01T00:00:00.000Z
-----BEGIN PGP SIGNATURE-----
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=aI/7
-----END PGP SIGNATURE-----