A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: https://docs.qiton.app/miscellaneous/support
Expires: 2026-08-01T22:00:00.000Z
Preferred-Languages: en
Encryption: https://qiton.app/.well-known/pgp.pub
Policy: https://docs.qiton.app/miscellaneous/security
-----BEGIN PGP SIGNATURE-----
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=S9Ly
-----END PGP SIGNATURE-----