A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Contact: preferred
Contact: https://20face.com/support

# Contact: alternative
Contact: mailto:security@20face.com

# Our OpenPGP key
Encryption: https://20face.nl/pgp-key.txt

# Preferred languages for communication
Preferred-Languages: en, nl

# Canonical URIs
Canonical: https://20face.nl/.well-known/security.txt

# Our privacy policy
Policy: https://20face.com/privacy-policy/

# Jobs / Vacancies
Hiring: https://20face.com/jobs/

# Expiry date
Expires: 2025-12-11T00:00:00Z
-----BEGIN PGP SIGNATURE-----

wnUEARYKAB0FAmkxAmcWIQSBioRoL4z4hCPZaOSSBClS9s2rVQAKCRCSBClS9s2r
VZ55AQDIQD9bQ/HCuXfsnLMgSjC6H6+D7qkFouJ4qS/znO/1bQEA90Hj/N4Z8wPd
tNRD/OPieIuAQbEwlFwYW0E+i124ywI=
=brOZ
-----END PGP SIGNATURE-----