A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@bolha.one
Expires: 2025-11-02T02:59:00.000Z
Encryption: openpgp4fpr:C8F5F5EFC665D558D9540C786BDE06706DAA69EA
Preferred-Languages: pt, en
Canonical: https://bolha.one/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQTI9fXvxmXVWNlUDHhr3gZwbapp6gUCZzYDogAKCRBr3gZwbapp
6jFgAQCMkwT8jNodDeFvZA+uKbDrWDPN+g9d1WRF8OM/FzmcRQEAqpDZLbcDkAaD
lq/5tQfpmHnzSg4GozBpTA0DledYUAQ=
=3ISb
-----END PGP SIGNATURE-----