A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:kenc@kenc.dk
Contact: https://twitter.com/kenmandk
Encryption: https://kenc.dk/.well-known/pgpkey.txt
Preferred-Languages: en, da
Canonical: https://kenc.dk/.well-known/security.txt
Canonical: https://www.kenc.dk/.well-known/security.txt
Canonical: https://kenchristensen.dk/.well-known/security.txt
Canonical: https://www.kenchristensen.dk/.well-known/security.txt
Canonical: https://kenman.dk/.well-known/security.txt
Canonical: https://www.kenman.dk/.well-known/security.txt
Tue, 1 Jun 2021 18:00:00+0000
-----BEGIN PGP SIGNATURE-----
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=n/o/
-----END PGP SIGNATURE-----