A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Our security address
Contact: mailto:security@dotm.dk

# Our OpenPGP key
Encryption: https://dotm.dk/.well-known/public.asc

# Our security policy

# Our security acknowledgments page
Acknowledgments: https://dotm.dk

Expires: 2023-12-31T18:37:07z
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQQFYDGlCaVz6IkoEG0IrDzr9ODUbwUCY6HTMQAKCRAIrDzr9ODU
b57GAP9KFRUdqix2s2gJup92OkJMaSNxW2KpCGonnwecXxJYYwD/XSM0ilKd3ocM
nit9CSRKL9kxCehhJFLxCIdQvUmBmAA=
=gGNF
-----END PGP SIGNATURE-----