A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@riskigy.net
Preferred-Languages: en, es
Canonical: https://riskigy.net/.well-known/security.txt
Encryption: https://riskigy.net/.well-known/riskigy.asc
Expires: Thu, 11 Nov 2021 23:59:59 +0000
-----BEGIN PGP SIGNATURE-----
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=O4JT
-----END PGP SIGNATURE-----