A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:bug-bounty@unstoppabledomains.com
Preferred-Languages: en
Encryption: https://unstoppabledomains.com/.well-known/public-key.txt
Policy: https://unstoppabledomains.com/bug-bounty
Hiring: https://unstoppabledomains.com/careers
Canonical: https://unstoppabledomains.com/.well-known/security.txt
Expires: 2024-01-22T05:00:00.000Z
-----BEGIN PGP SIGNATURE-----
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=YhHD
-----END PGP SIGNATURE-----