A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@eso.org
Expires: 2026-11-30T17:42:00.000Z
Preferred-Languages: en, de, es
Canonical: https://www.eso.org/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEErscYflIRj+0+ZcUyAXWl5cfIbLAFAmObSx8ACgkQAXWl5cfI
bLDBSwgArvnopF3d5DBlPCY5IK2nuHEB6sQSgX4298kKUnwRVyXWkmILn9I6DKHG
VUQl+znTgseBSyFsjoFF7yW3JMeb5FvpngVRvfRKGaKVU7KNsGRkCEJXli4OyCnX
zv8achNiXmT2UHF57QAfs1ZpljbVCDtGHUtxfvRbvgd2gv7Sle4uID+ubd7LKf8E
rpDiuWJD3xruG75mgoUt4wB4nXDqBDjs3ZbvaM6BYgT3UN4cCB1ro6EuVScTHYqw
PXHyIAvYuxkc9VL8XCSFqKK26LOs1t9HmYm3vCxWdz1cirIAmdeLmiyrcGsJK1Jj
RpbzeZUqVudYE6VygBD6nZJbCHnLNQ==
=ToSm
-----END PGP SIGNATURE-----