A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Our security address
Contact: mailto:dns@register.si?subject=Responsible_disclosure

# Our PGP key
Encryption: https://www.register.si/.well-known/pgp.txt

# Our canonical URL
Canonical: https://www.register.si/.well-known/security.txt

# Our security policy
Policy: https://www.register.si/en/responsible-disclosure-policy/

Preferred-Languages: en, sl
Expires: 2023-09-30T22:59:00.000Z
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=ZtrG
-----END PGP SIGNATURE-----