A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


#       @                            @
#      @    @                       @
#     @   @      @@@@    @@@@      @          @@@ @@@      @@@@@
#    @@@@           @   @    @    @          @   @   @    @     @
#   @  @      @@@@@ @  @     @   @          @   @   @    @@@@@@@
#  @    @    @    @@   @    @   @    @@    @   @   @    @
# @      @   @@@@ @    @@@@@    @@  @@    @   @   @     @@@@@@
#                         @
#                        @
#                    @@@                             

Canonical: https://kagl.me/security.txt
Contact: mailto:me@kagl.me
Contact: tel:+13069302190
Encryption: https://kagl.me/main_key.asc
Encryption: dns:main_key.kagl.me?type=OPENPGPKEY
Expires: 2023-12-31T00:00:00z
Preferred-Languages: en
-----BEGIN PGP SIGNATURE-----
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=mDPB
-----END PGP SIGNATURE-----