A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@octopus.com
Contact: https://bugcrowd.com/octopus-og
Expires: 2024-05-31T01:05:00.000Z
Encryption: https://g.octopushq.com/publickey
Preferred-Languages: en
Policy: https://g.octopushq.com/disclosure
Canonical: https://octopus.com/.well-known/security.txt
Hiring: https://g.octopushq.com/jobs
-----END PGP SIGNED MESSAGE-----

-----BEGIN PGP SIGNATURE-----

iQEzBAABCAAdFiEEvKQyVkSIckQvOwP3lphS92OVTmwFAmYd+v8ACgkQlphS92OV
TmxLuQf/ZfoPt7Oa9/WpxUox69eh6nylrRtE1OWdgamZl+W8mJrUFEAI6uaVgz7g
6/B6Ytpche5pVXAp0QaFUcG4/eAzVcDi2HpXT1CwQDBtDYtoRblNEWmCIU8Svm9c
xmV07jF8zcX0kxi3Ur0wvJjGKYqDxcT3PQh6S+XIZ4CrjsNp9Q9ognpd+vhIC3vZ
kP4iFyU/kIoYBmXSdlHN34ufw+Ih7q4ItfwaYRN8KQGF+omsllBnSavGZerVF4zf
xPiBq+rhs7hftOVgvCTdetNfo0eZwA7wvxI/vqyS/vmrj75z3rhKYDp+LajzQuq9
AZXbNzHftohi/BNWi/sBgqbWc28ODw==
=U3tW
-----END PGP SIGNATURE-----