A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@cybertopia.xyz
Expires: 2025-03-30T20:00:00.000Z
Encryption: https://openpgp.cybertopia.xyz/vks/v1/by-fingerprint/FAD5EC9DE9A70EAB1EE217AE73CD7F3BCFE89C74
Acknowledgements: https://www.cybertopia.xyz/hall-of-fame.txt
Preferred-Languages: en, ar
Canonical: https://www.cybertopia.xyz/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=VfIF
-----END PGP SIGNATURE-----