A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@mezo.org
Encryption: https://keybase.io/shadowfiend/pgp_keys.asc
Encryption: https://keybase.io/piotrd/pgp_keys.asc
Encryption: https://keybase.io/mhluongo/pgp_keys.asc
Acknowledgments: https://mezo.org/disclosed-vulnerabilities
Preferred-Languages: en, es, fr
Canonical: https://mezo.org/.well-known/security.txt
Policy: https://mezo.org/SECURITY.md
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEkXss9aTVhBTmGyuQr/Im9Ka2R5cFAmgZ+JoACgkQr/Im9Ka2
R5eTPgf/fy9RhFCYMH9Pn9LMhVT7OhtK8WO6+pep5NnqY4fY6cs4PdlijRkj37SV
C7405T046jyO33b9CliYFnpO8QBpTxLzNhpMnS8zO60nqBix85cD1XjVl64qKD30
itYcWip/NvNFHqv6oogBOnKdrmdarZtxgz/EzfnC0hzwY5G4tcYB7v9FkyV57ibh
MQ4i/G0tsHILnF9p1P4nNc9su5G26r6HhJu6i8gnkJZpG2BVRy6LgD/dPS4z8Ext
ZSqfRkfOI8kz8UIeoqfiOjgJHN9k1URNwQDYDHe9ypJBUI3TDXfVjetmIyNepzfM
5LLUAJfgYI3nYFfqHP6Otz4L5ZTrlg==
=bsaM
-----END PGP SIGNATURE-----