A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:postmaster@apambiente.pt
Encryption: https://apambiente.pt/.well-known/pgp-key.txt
Expires: 2025-12-31T23:59:00.000Z
Preferred-Languages: en
Canonical: https://apambiente.pt/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEQFJLoYRjE5d+1JwltfIqLF73TUwFAmh2CxMACgkQtfIqLF73
TUy5WA//QYjIxA8bNtR65por25lIl3iH5Diybuk6xm7VlBQPFoLzkKkD/6MesCO4
IFZ1koEzYf+a65DGRY3CSUle8ooxp95kFtsjaewMn+XY+E29clhKGPDo9uhOaGI2
wiOFjDrZkv9wsVoupT3wu/xcKinMZUXVkBD/HE0ccw8FQZAB8eu9J+pFeOMcYvpM
UI2LbXey+eTd++LcXZh75A5+3WqNOy6DFgnv9K2cdMrs+w0CzkeNlfFuMKfe9MEZ
vQhYOQhy5nvztSH6FSIAGwBfiCIX9fuAW5IBUyay9M6R1Rn+mGi+y1amSDDTJyix
WHacftck0o3XvboDqZjU0ghNq7Mtf+Zg3AulfKz+N+5fJLm+NIOgkRh8cRzNykUq
w47KTx8INfFmZWFimHGqtTKiqQFjv/jlQ43DoKBs9zups1KYv2DcSs9D/UUnqSNq
R6JO/Vl6pVXkXZo0XTf6Zlp7/74jmEBpEL9gIuNRVNq5tOKEtHmKWVXJSs9H1uMn
c3z//oLxK1IUtnx6LN/9cpNEENSO99d7Y3XevQlIHWvTPNYbKBzKPGeA0x+UKIeJ
OxqX1scfk2J5n1jzdPFHgGcDqD43KW3eNQ6ScAd5rO+A++0oVQHUBeqRfgMyLA4b
Z7vfhvt5wn7mm5pWIqjgtB9LQV9ecWY5/TLde2F0bRFXRvUbg7E=
=r5AZ
-----END PGP SIGNATURE-----