A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:psirt@fullstory.com
Expires: 2027-06-04T04:00:00.000Z
Encryption: https://www.fullstory.com/psirt-gpg.asc
Preferred-Languages: en
Canonical: https://www.fullstory.com/.well-known/security.txt
Policy: https://trust.fullstory.com
Hiring: https://www.fullstory.com/careers/
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEUhsgEL/dO9z4BIIY+E9Kmeuut1IFAmZfXssACgkQ+E9Kmeuu
t1LdKxAAmEwoN5KaLVOpRNLASVR0A6bTD78X3wl/3J0bs4jUXNh5MayTms+B6Lcc
CcRnvZryZ6oJwtTP51nF/en5q6pAdhioFqzyRETMdxfzsxPbu/y5tLOXjg4BUyO2
vyksuW/0Jc8668doR9sv/QpIooaRGexRwtRjN8wYwBr+f6sQufjNyM2CgeShcnP9
d8aWGnFe4FonTVGQTM24u//ZymFGlqz9gxSOkfxRtH0FNPcr5ro4DTkSDcKsCIzb
ivvnbhHe3Z7TRbfhEkJ5sIvhxhLiFdHdbJjqTzvORqpmsh0iryhPbPlTH/3wzI84
iDtjNTx3Ph5qty4fOiJQMYmb/u51HobTqowMVyTTZtkS30aIRYp9KG/sNV8R0v0S
2F2U26k9Qa6gAYoOTHvnktWyGpzMg/M065OI/W3wj82i54z+Hm0s0tzKIEtl02b3
dVz4zULn40RW++Edrcj/Z2b5J+GjxPkn5QgzJJ3qswbnIXmDpwz4RVYpxTEXvVZL
eH0RhxYr/vRjb+w4EdSEknbVO2gSGtsYOACqcODKOM27UbkbPhANl9ltU+OSSw3V
28KUTrT9yWF6jPg9s4zfQZ73HXoaO0hH8Pj1nOq0N11DoyyCRWQ7zyy4Ao+aTgDL
DunE1cizocqPKReGfnXBJqyZEBXVfm9P5Jx+Bt7DPXAtmhZIhHY=
=g3tI
-----END PGP SIGNATURE-----