A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:travelers@gotherecheaply.com
Expires: 2026-10-16T14:00:00.000Z
Encryption: https://www.gotherecheaply.com/.well-known/pubkey.txt
Preferred-Languages: en, he
Canonical: https://www.gotherecheaply.com/.well-known/security.txt
Canonical: https://gotherecheaply.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=myqW
-----END PGP SIGNATURE-----