A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@kiskolabs.com
Encryption: https://keybase.io/kisko/pgp_keys.asc
Preferred-Languages: en, fi
Canonical: https://www.kiskolabs.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEcsm6fEuAwn+x2grZXmzg9/9PXR4FAl5zSV0ACgkQXmzg9/9P
XR71AQ//dUuhLr7qabkryxwz7Gm2bJCd8bbMmgk5xI8BcpSwx+qQmtMYacP+IHCT
55EMUZ6lbeJL8Bkmw6iqLLj7B2JoB90hFCl6KBQjxJNHDAnXRPsrWYwtaAXfUPs0
0zTj4KnFtc2NzMEJhq98/wszViNbsTSmfJpzKzgoEqJoxTwn1bJ4lCyEaZCDQYn6
V3cUY4EECENvBBaELNWHeoss1dPkGKixSPfjXUw+fk4AlkSs21So/lzk1cvgIPhZ
aHsJX7TFFcmKqWAUVYR2E0NX40PunHjdM1MWvMGI/tt6amknqyBcwnckLFdcai9N
fZOnzbZ4t+8B9pjsFjCr4I//XF5EUZ1L2WnUJ0Qm42tHyCVa49kknlvkvo5BL5ZG
9wCk4XoRnsCyJkxE4H3jXysttf7LdE+RgKIx6sVTJGimU5mDCH51pCIXLznQlcvN
yW+mHppshyPKSPegM6BYxgkD2p4zJTK4EnoOoBsUzgSw3UGTdUwvT5etc+zP5TG/
OdQFqRTuFTCWoqNntAZexX1FYgZdLpf4uac7jwiNNYXKa9k2+3r6zLowCvoFB112
oj+pR2oVBjYALI2KtXIoln/b6BheMufi9TBJZ+Ok+jTKnw1NKrjDymOrTbFw25Ky
id563ZmUyF9Qbcv+0hsPEZg7X9nSz3gjHuQhE3yH/vbc81C+NY8=
=8Vtf
-----END PGP SIGNATURE-----