A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# --------------------------------------------------------------
#  General Information
# --------------------------------------------------------------

Canonical: https://www.armor.com/.well-known/security.txt
Expires: 2022-12-31T00:00:00.000Z
Preferred-Languages: en

# --------------------------------------------------------------
#  Contact Information
# --------------------------------------------------------------

# To report security issues with any of our commercial products or services, please contact:
Contact: mailto:soc@armor.com

# To report PKI-related security issues or certificate abuse, please contact:
Contact: mailto:pki@armor.com

# --------------------------------------------------------------
#  Identity Signing & Encryption
# --------------------------------------------------------------

# GPG key used for signing artifacts such as software packages, documents, and communications
# Key ID: 5F0B84017332C9EC523F25DA2D7BD56D10B04759
# Identity: ci@armor.com
Encryption: https://www.armor.com/.well-known/ci@armor.com.asc

# GPG key for submission of sensitive material to Armor
# Key ID: CBA3B180B552418103B86473D170E209DCC6F517
# Identity: support@armor.com
Encryption: https://www.armor.com/.well-known/support@armor.com.asc

# --------------------------------------------------------------
#  Policies
# --------------------------------------------------------------

# Responsible Disclosure Policy
Policy: https://www.armor.com/legal/rdp
-----BEGIN PGP SIGNATURE-----
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=R+e9
-----END PGP SIGNATURE-----