A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: security@shedul.com
Encryption: https://www.shedul.com/pgp-key.txt
Preferred-Languages: en
-----BEGIN PGP SIGNATURE-----
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=PIpP
-----END PGP SIGNATURE-----