A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:cybersecurity@waverley.gov.uk
Expires: 2024-10-19T23:00:00.000Z
Encryption: https://www.waverley.gov.uk/pgp-key.txt
Preferred-Languages: en
Canonical: https://www.waverley.gov.uk/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=ZqLX
-----END PGP SIGNATURE-----