A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@dwayne.xyz
Encryption: https://dwayne.xyz/static/public.asc
Policy: https://dwayne.xyz/privacy
Canonical: https://dwayne.xyz/.well-known/security.txt
Preferred-Languages: en
Expires: Fri, 31 Dec 2021 23:59:59 -0500
-----BEGIN PGP SIGNATURE-----
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=r1lC
-----END PGP SIGNATURE-----