A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512


Contact: mailto:tommi@maklin.fi
Encryption: https://maklin.fi/keys/tommi@maklin.fi-0x5EB7BC3E25646104-pub.asc
Preferred-languages: en, fi

Canonical: https://maklin.fi/.well-known/security.txt
Expires: 2027-10-22T00:00:00.000Z

-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQQiqcjN0pGDTvLi+Klet7w+JWRhBAUCaUGd1QAKCRBet7w+JWRh
BGFsAP4rSm6ia0/uSdNHT3BpQrhyvcsDgEJ9DluGsVHf1iRs1AD/VhieRa3QVbZf
UCHzCY858EpZW4bP40RD2j4alpFZDws=
=WR3C
-----END PGP SIGNATURE-----