A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Our security address
Contact: mailto:dns@register.si?subject=Responsible_disclosure

# Our PGP key
Encryption: https://www.register.si/.well-known/pgp.txt

# Our canonical URL
Canonical: https://www.register.si/.well-known/security.txt

# Our security policy
Policy: https://www.register.si/en/responsible-disclosure-policy/

Preferred-Languages: en, sl
Expires: 2025-09-30T22:59:00.000Z
-----BEGIN PGP SIGNATURE-----
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=HPSN
-----END PGP SIGNATURE-----