A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@digital-system.it
Expires: 2026-12-31T22:59:59.000Z
Encryption: https://www.digital-system.it/pgp-key.txt
Encryption: 5d2d3ceb7abe552344276d47d36a8175b7aeb250a9bf0bf00e850cd2._openpgpkey.digital-system.it (OPENPGPKEY DNS RECORD)
Encryption: https://www.digital-system.it/.well-known/openpgpkey/hu/t5s8ztdbon8yzntexy6oz5y48etqsnbb (WKD)
Preferred-Languages: en,it
Hiring: https://www.digital-system.it/careers/
Canonical: https://www.digital-system.it/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQSPmySAeNi3j50frjbJr3M1DAVamQUCZQR09QAKCRDJr3M1DAVa
mZCKAQCAMP48ISDPdSUBPro/9nw+iA6IMGzBcOTWcif0Bm/rqgEAxphUMGoYcR1h
3wYMGi7eX5SkOtHGjKe8L8MOmbKTdQg=
=PoxN
-----END PGP SIGNATURE-----