A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@weblate.org
Contact: https://github.com/WeblateOrg/weblate/security/advisories/new
Contact: https://hackerone.com/weblate
Encryption: https://weblate.org/.well-known/openpgpkey/hu/t5s8ztdbon8yzntexy6oz5y48etqsnbb
Policy: https://docs.weblate.org/en/latest/security/issues.html
Acknowledgments: https://github.com/WeblateOrg/weblate/security/advisories
Canonical: https://weblate.org/.well-known/security.txt
Preferred-Languages: en,cs
-----BEGIN PGP SIGNATURE-----
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=Mfby
-----END PGP SIGNATURE-----