A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:mail@vanheusden.com
Expires: 2036-12-31T23:00:00.000Z
Encryption: mailto:folkert.mobiel@gmail.com
Acknowledgments: https://vanheusden.com/key.txt
Preferred-Languages: en
-----BEGIN PGP SIGNATURE-----
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=g89G
-----END PGP SIGNATURE-----