A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:psirt@fullstory.com
Expires: 2024-08-02T04:00:00.000Z
Encryption: https://www.fullstory.com/psirt-gpg.asc
Preferred-Languages: en
Canonical: https://www.fullstory.com/.well-known/security.txt
Hiring: https://www.fullstory.com/careers/
-----BEGIN PGP SIGNATURE-----

iQJIBAEBCgAyFiEEUhsgEL/dO9z4BIIY+E9Kmeuut1IFAmLqjJoUHHBzaXJ0QGZ1
bGxzdG9yeS5jb20ACgkQ+E9Kmeuut1LPqw/8DsLLhQMGmUH7eb8Oyv3PiA8luv4b
N5bXzIlUfOi8CVs3qdsXcFG7Bibe87MLX2ndouSqVr1IlpQNVgzNkyOpsBg8sKdq
EPopQR/sEulshE0fkQSjk5+kbfcTPrh8/6aAFnRgKysuthMStCqv+SNVhtmGiBPo
bbj7jIwH7IVkOw/QvYQqiO7gvciH4nco1Pi18N4SyVDqTVfqYEKxQFwXTzJbMPDz
laG1OmI7+vpZeSb83RVjBwD8RA90rtGBiZOxezyIDB1YfTef0VUpRR70PSP43jzj
/7aSKEyAPyThyHI0j+qIzlPer/4GGolAFGYGh8jU+Pv0LrzAOCJToh5DsG5pZqtT
qT3Zid6ytCbm/9g+2j1m1dnIG7N4F2l2u/oOmOdOE0eI0Ds6t3KXEatqCrRYtR1l
42vw1XW3ifImvs/3oH/3oGc6P7s9Q/BiK3oA97ZIqq0CC///TsT39Firbgru16Gg
NcCPwoSpiubcnAtVvxst8SnH0UK1i+4eDgzXPjosWfqOAIZKbZ29lr7bK4KXJLaO
FLgykTGzrK/ext1Yk6/tdGc0ENikqTV7D2g9/Lgjb0CMLqvVGOWM9yhAKN8wUNYR
3uFaWr/lW7KQZqQID/zbCkdLXIhCwQsnpbGNs+VOMYoe+eu87WJcwf0+8zFv7kCi
5/ZeKSxJ03Jkgfg=
=SeQN
-----END PGP SIGNATURE-----