A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

# security.txt for profitobsession.com
# Learn more: https://www.rfc-editor.org/rfc/rfc9116.html

Contact: mailto:security@profitobsession.com
Contact: https://profitobsession.com/security-contact
Encryption: https://profitobsession.com/pgp-key.txt
Acknowledgements: https://profitobsession.com/hall-of-fame
Policy: https://profitobsession.com/security-policy
Hiring: https://profitobsession.com/careers
Preferred-Languages: en
Canonical: https://profitobsession.com/.well-known/security.txt
Expires: 2025-12-31T23:59:59Z