A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@digital-system.it
Expires: 2025-12-31T22:59:00.000Z
Encryption: https://www.digital-system.it/pgp-key.txt
Encryption: 5d2d3ceb7abe552344276d47d36a8175b7aeb250a9bf0bf00e850cd2._openpgpkey.digital-system.it
Preferred-Languages: en,it
Hiring: https://www.digital-system.it/careers/
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQSZhQLPPfKPcw1V2Wc+axRVf/CCSAUCYnT6NQAKCRA+axRVf/CC
SMjFAP9y8CLXD6H7yRE/4x7gtGkXtjh79D2gxOp3Mc0ozfTB9gD+LbzAzzo7yhB/
YpakTtg0ocTKSM+5NqkDwO4f79d9rAM=
=3Y7E
-----END PGP SIGNATURE-----