A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

#
# PANDI security disclosure policy
#
Canonical: https://pandi.id/.well-known/security.txt
Canonical: https://www.pandi.id/.well-known/security.txt

Expires: 2025-12-31T23:59:00Z

# Please referrer to this page If you would like to read policy about domain .id 
Policy: https://pandi.id/regulasi

# Please always try to contact us through our online form or live chat to speed up things.
Contact: https://pandi.id/kontak
Contact: https://pandi.id/formulir/penyalahgunaan-domain

# We can offer a proper response in the following languages:
Preferred-Languages: id, en

# If you think you'd like to join our team, please visit our job vacancy page:
Hiring: https://pandi.id/karir

#
# Thank you!
#
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEsGER9DO1THSFhiYJ6li2/eMU5FQFAmie2QQACgkQ6li2/eMU
5FROgQ//cIe1AYmufLYGrwnHTSWu1VgLd/54LcllS91R9xP/dtHE28MzN/dgqEhP
VVmwk9uYt71ouSCbI1Pn4FwGahsr6U9KPT/me0DukwlUnV1JHtjkYCqAIwIDHpfA
9UjfGtmwMET3pQzLGqJHKwaBq7f9UYNdx0g4WY6K1klIp51oe51PsSKOMNpE7Plv
Nq04jQ9jY3pqFU78mEUzvuP4Qr2xoHalBPepATz9jvzDqw1TBQTvT5AapI3ajH6m
3zXJC2wnPxAnajdRux9T/VpDOomNHiM7K84+lOz1QaX1iOiOgPtdc4EfwHYWXbZ4
MGvKc+jEVVnoTNwa90jSB5UREZBRvRd2HtS/Cwz3EnpQaHAaqbEeFL1sd5h4OUlu
AUqb7fsrus5bls+eBArcOI+UX3EnVzRpTGbxOtkiM8kk5/KLXhVi/JLqJFkOzJiC
+0ssXwbFwYvLS93HwvKQvDV9DxmnT1p/BQi+L+dbugeF790u1RVDSMYPKgI/YL5F
6nHQwbi83ClMRnB/3atXapNXk3x3HJsDS8AQOZt625jEJGkcjdJHCtedjANM9TW9
KuvJdDl/RwAKpRQed9FNZjBgAdth+oBnIBB4M0izNq80VTHQ8JYToazhZJ9iHbMM
eaank87atW3U3DJb4KAJ5Or5UucVptgyp/gQlHmo08kWqPXPEwI=
=cxxX
-----END PGP SIGNATURE-----