A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Contact: mailto:ipcore@cni.net.id
Contact: tel:+62-5292-1960
Expires: 2024-08-30T22:00:01+00:00
Encryption: https://cni.net.id/.well-known/ssl-bundle.crt
Canonical: https://cni.net.id/.well-known/security.txt
Policy: https://cni.net.id/security-policy.html

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJlMe4nAAoJELKoetnrIH4hwyIH/0uIohzDLbnMJaSzYS2xiDzV
+Q3lT1P7/hdZkd77sZCrYXVKU1y69P/wk8hBENYoMURgggylLys/57Q06UGts2M0
GQvjoaAwotWHsRYygmnLBuGyOupjAUuRBCy9TZfhFwPosQl0Qo9Q2Tu4WrMeLGCq
xxS8vWHfo264z8Hmn0LwAhi+/QLarnW7joF5tNHDbjgt8kKwPnReJIqXKHOFq7pD
qKlt66ZSJGMJqAsoCsHE78ytiEUDzQUgVmyJRbYu7qnTPULVS6Myxn3KYVCRVHx5
S0YyfLEkHLKT0SnuPtPTq30Zb4s6N07xlIOpkMx1z0KiR1AOocKGw9oSvQ4SHzc=
=mzAJ
-----END PGP SIGNATURE-----