A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@ericswpark.com
Expires: 2026-07-23T01:41:00.000Z
Encryption: https://ericswpark.com/.well-known/gpg.txt
Acknowledgments: https://ericswpark.com/pages/security-policy/hall-of-fame/
Preferred-Languages: en, ko
Canonical: https://ericswpark.com/.well-known/security.txt
Policy: https://ericswpark.com/pages/security-policy/
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEX7iLTAQl9YOFpcbWKVjH79Xc2w0FAmiAPzUACgkQKVjH79Xc
2w0HLhAAo3Kc+fGhlgzpB6hNk8gEFGRaRzz0iT9ufY6j7HVouCK8hv4ZZpwo4/6Q
ZNet7k2aqy9VHVHdRf7z41GkKmMJ5t9npHHeCiUQhANBYUy1xmqsYT5KiKT0LtbZ
dB4ugvCHQ99O+1D0UDpJst4nycuqbjMkagwn6JtVj7ga3mM5ATqd9yrC0y6uTSNt
ls/P0DpoxwokLl668Tq2k1ZyAE1DjcUQQVInGeu2N41LX3eXwqk13HLJbniNvbiK
36DmldutbhwkQOBvzvq96xGgGG5drMeV7+cFe+m+ssrGE/CXUXLxnNWEx4j2VPPb
NFVEP5SfqGtASwmvJ7w38K3g1ORvfRmA54XIfTmqop18fAeKdBU6CCs38YJ+95GK
lYFAiIbaMKqfAAXrjZf8qgBlmYtW54UD58O20vDLFPyLGoIPWgH2TXU7OWYVPqUD
vQyyxabKJk7wbx9BV3L1rE4d+w4BRvWOpfa9AjQNDXFF3t9T99M0oSgZeZzLRCQU
DS2MZe/YTHWqdPK5AQb+wDM2Nxo2WDMXjm1LfOIDiO6Yn617eO46mucJdbV/yVLd
xoOF5+PQF2QOSzX1lwcjyAJQYcJPxn1jxo9YED1xC/++S768FY/QttXAOGYDEpkO
b/Hx796HXT15X28tkcnR5RCX9Oqqe4CsIev9UoPWpJ29qDFshUM=
=pmbq
-----END PGP SIGNATURE-----