A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@machinelearning.ml
Encryption: https://www.machinelearning.ml/pgp_key.asc
Preferred-Languages: en, el
Canonical: https://www.machinelearning.ml/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=TGzx
-----END PGP SIGNATURE-----