A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:xyh@xyh.pl
Encryption: https://xyh.pl/pgpkey.txt
Preferred-Languages: en,pl,de
Expires: 2026-06-04T03:33:01.000Z
Canonical: https://xyh.pl/.well-known/security.txt
Canonical: https://www.xyh.pl/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=JkXR
-----END PGP SIGNATURE-----