A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://paronix.nl/.well-known/security.txt
Contact: mailto:security@paronix.nl
Encryption: https://paronix.nl/.well-known/pgp-key.txt
Expires: 2026-01-20T15:04:22.000Z
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEqu2H9324F+lWa1cNdNT7Fi7d4jwFAmeOZfoACgkQdNT7Fi7d
4jwV3g/7BPdwE5ls6JjawL9LDWsjk0h4pzuGKGY8QrOCc8Tmi3EMhG4c7NvvHq1Z
ZRWkw0oCiEMos3gJycZlp19ILBVO7KstdBbunc4Qe6cn9fQYdoVjGtdSiGtMXmE+
teWyl5B8N2MVUHp7ylQ0klLz9O4uqfgy2Xx/sNGLnBoGN5xkODDdH7rVERo15XPp
B90IzIUi9z2b/qHiujoG7wnLuuiJbF/OuFIkIII1MKdroN70BPDUGFEAzkL/O9dc
MhJY7RMKjCPMGom8opb2WRP2z5kBmFenMEAEz53uslRgXiqp0P4ibDL53eN0VPT1
Zf8+TBaFSxXNxarra/f6DaShJvRiEMw6TItkxzzwKTeZcRHHad4U+Mh2zEpLqaRr
SEIfLlnYE6uAysUJrSjVFwWXhtcnt7/Tvbv5kLJfBesmS0Usf1YPgTIvgwH8Eyyj
4oEy3S3O8WZmrwuVoneo36DdDHOpOFbMtd4+BJ5yOUWeKMPbUTNflIsUUA6ZG1h1
ih5o4WiHV8qwW7a3nLt46B4OBj7ZdNxh//AI2KmfTHxQ6LBXYGq4S6J8Qcsr/XsP
qHVjtg7GbZn6+pI0OUwGpF/4V+v0Ld/E7VJ+nSxsBnhNpKEq1Wv+DoceGBht8LK/
3qMabh/1VK+ujBIFmYdX/+Fa/4suM7ebvjyHJzOVBqVw2RTGstc=
=yS5R
-----END PGP SIGNATURE-----