A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Our security address
Contact: security@websupport.sk

# Our PGP key
# Public key: pub   4096R/D8F1559F 2019-11-27
# Fingerprint: 2435 2CCA AFDD 1A42 AE85  2BFA 005C AEC3 D8F1 559F
# User ID: Security at WebSupport <security@websupport.sk>
# sub: 4096R/B029631C 2019-11-27
Encryption: https://www.websupport.sk/security-pubkey.txt

# Our security policy (in Slovak)
Policy: https://www.websupport.sk/support/kb/nahlasenie-zranitelnosti/

# Our security policy (Google translated to English)
Policy: https://translate.google.com/translate?sl=sk&tl=en&u=https%3A%2F%2Fwww.websupport.sk%2Fsupport%2Fkb%2Fnahlasenie-zranitelnosti%2F

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=71dI
-----END PGP SIGNATURE-----