A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:postmaster@jbsoft.nl
Expires: 2029-01-27T08:00:00Z
Encryption: https://jbsoft.nl/pgp-key.txt
Preferred-Languages: en,nl
Canonical: https://jbsoft.nl/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQGzBAEBCgAdFiEEsm7ajWZ/4OkWFwY28DCay4o4SZsFAmeXMJEACgkQ8DCay4o4
SZvA2Av8DlOlWwGiblVcR6oDApdniet5oKWb39BMH59JOfd5/ksTJ/YDXePr12zI
UmRVj8bhfe3y37kpz/06uuhbHgLpAjzGH/bJXCn84tPupVkbhq+zOR+Zt/Mi57zW
k3ACP84/UsZZdkQJxtjK6ytisF7g/mjhmbQlkAbs94q6EQjFPUdnIOeTHoelvnSQ
J8IsPu8vDLUSHGAVL8X+U+MSYMxQChxCtCpXhuiRyVn2gET/btdtIx8ZlKCCDthW
B4gT0HOe1zm5riHIEWinbjemLZlJdUXNzUBzAtaRYmBPlP5fVUhiJ4lGgARkxAP5
q9Y/Tdhe/2ofnrOUb23zzqZFeEr2nqj8dJqMmb32RsMIgWC2HrCUfJTmD3bEQwgn
q0K8qViYTZZ/3aE4X04s6vnA1mYxqlcDEr1wF3jn6JGDI15hcr4bopQBxa7ds0wG
0vdR7h8N/tP+BcZLwYHM38a4vriJLoatDTBliaW8VKgAac8me4o8wVOLkyzVUBGE
trQq/OEz
=UvtR
-----END PGP SIGNATURE-----