A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@safetyculture.com
Preferred-Languages: en
Encryption: https://safetyculture.com/pgp-safetyculture-security-public.asc
Canonical: https://safetyculture.com/.well-known/security.txt
Policy: https://safetyculture.com/security
Expires: 2025-02-26T00:00:00Z
-----BEGIN PGP SIGNATURE-----
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=joix
-----END PGP SIGNATURE-----