A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:psirt@linaro.org
Canonical: https://www.lavasoftare.org/.well-known/security.txt
Policy: https://www.linaro.org/vdp
Expires: 2025-05-19T00:00:00.000Z
-----BEGIN PGP SIGNATURE-----
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=/rzh
-----END PGP SIGNATURE-----