A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:website@watershed.co.uk
Expires: 2024-02-17T08:00:00.000Z
Encryption: https://watershed.co.uk/pgp-key.txt
Preferred-Languages: en
Canonical: https://watershed.co.uk/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=66ZG
-----END PGP SIGNATURE-----