A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@faceup.com
Expires: 2026-09-01T21:00:00.000Z
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/AD969FA6E8AEDA878B40729A73903BE76264C2E9
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/3692B4EF18F7DC8EDF79AAB6938A75F0DA8C9548
Preferred-Languages: cs, en
Canonical: https://www.admin.faceup.com/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----
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=aU8s
-----END PGP SIGNATURE-----