A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@accsys.org
Expires: 2028-01-03T12:00:00.000Z
Encryption: https://www.accsys.org/.well-known/security-public-pgp.asc
Preferred-Languages: en
-----BEGIN PGP SIGNATURE-----

iQJIBAEBCgAyFiEEIQkFRR4WGAygM/RJ8puTaV3TYQ8FAmlXvcEUHHNlY3VyaXR5
QGFjY3N5cy5vcmcACgkQ8puTaV3TYQ93PQ//Wn64k7u3irBq3RgtpOaYEJ+Bwcl+
jHS6Y5IP0Mcw9cFK4xliACOIa+PSszU0p+H65fDjinDXg2wu2cXDLEaNYGGD9ApB
Lkb3Dg9bgaxIGztaTYXlXqHS2fRJXIyg1OGXsbFdIVS0BGGpTLb/fB7WSDOeSY1J
gKbiyCDw0xMz1jzWqGx/WtkJ/DxDy1oNq8q5tjBNgicL+IQVTzdSPrWtQ0AQX6zL
bXYzRJJZIy55Wu4FM5RCkG3igXeJPjasBF1TFM3pdlXMLiyL0NInJbAU6ATWAvfn
TIs4HuZnKYE/Fkm+1NW446XND02g+uHNXzVHlHtyWJG7WWrdAk0Sf+k4iRiH9mHA
uITVN7ODvaDCsDFU3uop+fMapy71QSt6ox7+Ey3k4Z40GigNR++L5By/xLgsy1Bn
XGdw4sd2fZz4dwIyZ/Dq7iF/UgAkK2StDMS5J6mFNSuYoeQTozUgO1Q3IPmJ97ig
mcj1cH78QwxSlyhW0CRp+TtqW+281uVE88F52cSxhQx5x5c3EbEjz8C7slKObiM+
WiR11cCojz03Y/P0JE3y5dHdxk3dma49Kc35X0Ro8IH8LXxsNimykgDbkiKzKstK
p1JICyw5BDbKzjQD9WtnE7QrplwjAm/0ap1obIrdeF6B+0mRRh0gL56ZyaV99rB/
F3+TEwYWEFhVX0g=
=2R63
-----END PGP SIGNATURE-----