A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:paranoid@8a.is
Contact: mailto:hausemaster@paranoid.agency
Contact: mailto:paranoid@pgp.is
Contact: mailto:abuse@8a.is
Encryption: https://8a.is/pgpkey.txt
Expires: 2023-12-30T22:00:00.000Z
Preferred-Languages: en
Canonical: https://8a.is/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEEBb26pYpVSWfGUragWajkfT31oAFAmR1z4oACgkQgWajkfT3
1oBgcg/+JHuNeyTkz4C5zR55UbJlCy6gZ6LrF1UE7MrWbf6xdlFMZm7akzMj88yQ
+R5Kxukit1Wm3gitS9Euvp0umoeQRCX+QJ2UNTHlwBSUvEkZaiPtTrAcsDHzp3CG
SOnGqS50XKEY0DJNUSa2olIw4D291vVptUOdLjs7CdUYZG8D2TKtfPoEXK6xDy+2
pf3ujLF1qI0Z8nDI/kaKX0KosmlWQyr2sXUylbzBh3F5LphSdWTa5VdjvJZCiFrx
zcQnuOtVEkqGACi33y8VJgkfsw8gyiBolCCMZCRSjbzBR07in042MsypuuxA68ok
kY6/gnqPgtx/qKE5GKl//1AcgvGbH4dk/VvixMV1NWdVDnBukiaEtUUDpM6RXGqQ
e5ZzAJDyc7IyIX5R7mN/8EvHk8NhMuSvLotOjedmxaLUY5QHZmYAvn2isVT+71mY
pJ52aDrEYget7lp+8T+B74CNJIB3pw9/NiEeNAIi+59aH3RhoP1CFupLaV4CXxvw
5YNAy7xTmPNUUeczkbn2L+8tuuMMaB60KlGl3OdWtlm3eG4Foj33eleDpDHHwqhO
C05g/1vbvJt/hA++3NMkwnqGx48Bc2pvPeAETVfJuP/N3Q3CFElK+Ufp8TuEzFST
KINc7xn71V06XLb9tv+wKdFdH0NYBBxec1UB2J2b/VTerfmRKjo=
=tHR+
-----END PGP SIGNATURE-----