A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Canonical URLs
Canonical: https://ahoj.email/.well-known/security.txt
Canonical: https://mailer.ahoj.email/.well-known/security.txt
Canonical: https://mail.ahoj.email/.well-known/security.txt
Canonical: https://www.ahoj.email/.well-known/security.txt

# Our security address
Contact: mailto:hi@ahoj.email

# Our OpenPGP key
Encryption: https://ahoj.email/.well-known/pgp.txt

# Our security policy
Policy: mailto:hi@ahoj.email

Expires: 2025-07-30T10:00:00z
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQIcBAEBCAAGBQJm04TiAAoJENzwQe+rxKwjNioP/ii5iyTW/BAuF1DdekGvahmr
VMx9Svx0ayQkvON4ccNOEny1kDEGPjeTxADg/dFdup6SbK/UDh1oVFw03S0hdVg3
UyR7VV84nqhDYKYoMcPzhRV4mjOpE9mlkbcQD5QhRhaueHK3wqIzXV2SC6dFsX4V
CwBS4Naf667Zthxe4QNixq2/G51eX9wwwqyWPUjtRelGh9I2tmgV83tk5lN4GGE/
EsM3Zzzyt1iu7shuO43GMUayJS5QjFR8FbNkviev4MJVHgngMwOD92zqdnhq8v06
ux5EKWa8vBKwQpasQ0rYl2OFwDv27sETl2XN5ry8r4DR3MbDiNChLotSbgNIVsV8
NjDed/mArDbBnsiflMzXaMjaT04OSsoKEe5IfALtHImCua/vSyNVlft8uRu8KL1G
RdS2p6WMWIdutivOnShI7KsJ2Mg7jNjHs0LbsWLHzZEUFm8avNJkMl2nB3MYObrh
HaBOGQe2Axin7EPIMnB3pVMUP/DRS3vsf5hhQhtERoWfOfSG0YPNV4VYOM9V6otf
faHoEgJNVPiFNS7wQbF2CHcgZJL/wItWHEtGTfd2CL7iakGIsQMCVFIuQGxJ+HY8
sI83ZvzXJwk5KCZRII9pmlJG7hrmv1pCkIBmWzBFJaPyquT2fdIzQlfjt5iTDRhH
D9KWXoogZiA5OJ8RoZ9U
=TS7q
-----END PGP SIGNATURE-----