A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: https://greenhost.net/contact/responsible-disclosure/#reporting
Expires: 2030-01-01T00:00:00.000Z
Encryption: https://greenhost.net/contact/security-key.gpg
Acknowledgments: https://greenhost.net/contact/hall-of-fame/
Preferred-Languages: en, nl
Canonical: https://greenhost.net/.well-known/security.txt
Policy: https://greenhost.net/contact/responsible-disclosure/
Hiring: https://greenhost.net/vacancies/
-----BEGIN PGP SIGNATURE-----
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=01O2
-----END PGP SIGNATURE-----