A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:petr@ptrk.eu
Expires: 2025-10-18T00:00:00.000Z
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/05D952D080E7319560A0CDC7C1BA4F0D5D63DECB
Preferred-Languages: cs, en, ru
Canonical: https://ptrk.eu/.well-known/security.txt
Canonical: https://www.ptrk.eu/.well-known/security.txt
Canonical: https://trakman.ptrk.eu/.well-known/security.txt

#
#  ____      ____
# |  _ \    |  __ \
# | |_| |___| |_/ /
# |  __/_ __|    /
# | |   | | | |\ \
# |_|   |_| |_| \_\
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQQF2VLQgOcxlWCgzcfBuk8NXWPeywUCZxLUawAKCRDBuk8NXWPe
yywUAP0bo33cmGgXHd+TCqKArXElgLnvh64wjxEcxs/Rz+fh/gEAyT6mdDFVON/+
5bbkWI5b6oFk/beWzM0Y7IU3+WfrbAs=
=bKVw
-----END PGP SIGNATURE-----