A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:kerstenpatrick@gmail.com
Encryption: https://www.pcpatrick.eu/.well-known/pgp-publickey.txt
Expires: 2030-10-01T18:25:00.000Z
Acknowledgments: https://www.pcpatrick.eu/hall-of-fame
Preferred-Languages: en,nl
Canonical: https://www.pcpatrick.eu/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEPDur886KNvD6AuPnIwsYwtvMCzIFAmjexQUACgkQIwsYwtvM
CzK0QxAAt1T7r6jdGhKnDLKVm4cNJnFGipInNjKFIJSVngey6g8V2aMT6Pzsx8+G
gyBMybWcEM57EXYbwLrRhJbYdMRzkd7R2uU9R7RUpOzYjmP7O+hhW2iBAcLoRrX6
BrmzSyr5lclroT+JntaKQgkvfXp0eFsGg6LGXPgDq9vSaOxdU5AHwcMa0yJKgD4K
Z0PHiZ8IJh6uEbrwTaKGScBaRF1Xv6+CqJezxn0mhxJAykUKMlRs5/YxHAdA84lL
KkuSQf3vvLSF8YtXnGUWNM4c/Tr5jUqntrnZ7BZtK+74nI8wx63wXzOI/+97XhTB
TBwGOuSHjxnY+OL15CRLhYLW4ZZR+xMvTzL2yZDnhDJ68vmATGwEA2fKdhN/65pe
ZlwBTSQDl4dxVG+9LsVpjpvb5wsjZf1QsuPxSXxGgaZaeJdHw9eQiHkjitahO1bp
BIUrMN+LTknwA+rX2+51cPsluCFp2SlVJzaicUrPteLDduQb45awk10D5HRsWn1U
hblxCZD13y3JipHe4LQ0sV1mkl+AAFythIOnXbYE8my4sQrIDa1dCxPqup5xccAj
FZPwKM2TIv+6oQDcGrrw+bKu193hXPu9pr7HbggzLStZSe7e1PEXzszCyLCyJaS2
WXwKB25TMVP68AjJJwmlhw6upiS7WkrnU7TIbqq/xeDwPkvLUTw=
=Nnt5
-----END PGP SIGNATURE-----