A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@scientific-solutions.com
Encryption: https://scientific-solutions.com/.well-known/pgpkey.txt
Preferred-Languages: en
Canonical: https://scientific-solutions.com/.well-known/security.txt
Expires: 2030-12-31T23:59:59Z

-----BEGIN PGP SIGNATURE-----
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=YO8S
-----END PGP SIGNATURE-----