A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: security@inscribe.ai
Policy: https://inscribe.ai/disclosures
Preferred-Languages: en
Canonical: https://inscribe.ai/.well-known/security.txt
Encryption: https://assets.website-files.com/5ea61a1bf0e208bb1c5737ac/60a68534a182f6729910480f_inscribe-public-pgp-key.asc.txt
Expires: Sat, 20 May 2023 00:00 +0100
-----BEGIN PGP SIGNATURE-----
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=8Cbb
-----END PGP SIGNATURE-----