A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://ryanobeirne.com/.well-known/security.txt
Contact: https://ryanobeirne.com/message
Encryption: https://ryanobeirne.com/ryanobeirne.pgp
Encryption: openpgp4fpr:A84954B75EF0D9D2B6FE957C14A5DCB56F7EEC92
Expires: 2026-12-25T00:00:00Z

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEEqElUt17w2dK2/pV8FKXctW9+7JIFAmlZdasACgkQFKXctW9+
7JKj0wf/RGsvbu3i9dwktXRUgq1dFpnmUH4ifdChJQyRG/8gVv5Qg2m5yblvqOcf
bHz4RUcGoodz8L/cQGANroKOlpbfF2+xM9SkolzRXAzekDPQ7Z+ckTB9QQzsuXfg
Ir2RKk2ZPEjalllkRF47+lcXz3C6HowBkYl8/sWfsDQi/UmN3u3y7c6earWrWVId
jd8NknICQMa/8afId6IfBXEkzAK/oh10kr4G3i12WjbP3aF6fjlGxFoMw1NhSnvv
C5BF24wePja0hbwBjXYjaMZ86mBS3IeFhIyNqZ8HofuZkcjpadZW+VbtZUvJqeNG
sUOKiwBji705ViN3oiUk/QHRzD2q4Q==
=jK/e
-----END PGP SIGNATURE-----