A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Canonical URL
Canonical: https://www.tintup.com/.well-known/security.txt

# Our security address
Contact: mailto:security@tintup.com

# Vulnerability Disclosure Policy
Policy: https://www.tintup.com/security/TINT-Vulnerability_Disclosure_Policy.pdf

# Our OpenPGP key
Encryption: https://www.tintup.com/security/pgp-key.txt
-----BEGIN PGP SIGNATURE-----
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=JAet
-----END PGP SIGNATURE-----