A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@cleverreach.com
Expires: 2022-12-31T22:59:00.000Z
Encryption: openpgp4fpr:A2B7E482E8CD57A4D1A8160962C0E323C740650E
Preferred-Languages: en,de
Canonical: https://cleverreach.com/security.txt
-----BEGIN PGP SIGNATURE-----
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=ZYEk
-----END PGP SIGNATURE-----