A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: https://www.decisivetactics.com/security/policy.txt
Encryption: https://www.decisivetactics.com/security/pgp-key.txt
Preferred-Languages: en
Canonical: https://www.decisivetactics.com/.well-known/security.txt
Policy: https://www.decisivetactics.com/security/policy.txt

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEU5W2JYGFiZDjV77VtUGXCX9eKHsFAlx+WGoACgkQtUGXCX9e
KHvf/wf9EQsyncSg61ZUCSTRdv2u9o0DDwniHOj28ejkI7lVaULgHjC1ACx0J4xU
OmyIy0/lXZegvJfDSaE/KvU5lgWImuOvAorZMH92KYzXg04pw59bRNHwB1VhusC/
Qj8LE+jn1Ah9IFsqONEb9V0wE01HOAR6vDMpDoGfEusUVQnGsmQLA9N9okkDFYMX
5LpdDOvseNnVsFolXyIrXbiVd+yu+WjRqgVZ7G0JklzgAgl2WzJDaWX88gYqVYsO
Ndaor0JwWdCdmKiltMMgSHeSoXXsGFg3yjb4djR/0x8BkBkUQo46IrnyJZWJX1hb
aXfXXxMQMG3oNd4Ha/vOTQ0A4KGFCA==
=9Ckk
-----END PGP SIGNATURE-----