A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:vulnerability-reports@avm99963.com
Encryption: https://www.avm99963.com/publickey.txt
Preferred-Languages: en, es, ca
Canonical: https://www.avm99963.com/.well-known/security.txt
Policy: https://vulnz.avm99963.com/w/report-vulnerability/
Expires: 2024-03-01T23:00:00.000Z
-----BEGIN PGP SIGNATURE-----

iQGzBAEBCAAdFiEEfyEI/1SjXqIh4t+AkewqaNZxC4AFAmQNJ+0ACgkQkewqaNZx
C4D/hQwA28eonTImIQX6h+wr0lfwu8Idk/70Z7r5gyUu4cPEsJW9L3i4QGodm4dQ
CG9IuQnlbmDLCc8IUyNpvCEmKgHWIQz0ifcsosPqKFSXeDpWZ00qtMNVbkh8NM4l
DT0P39N3wI8v3FW9OZk1kX2X0kXXFjZDFgM4Tr1sAxdNCU6aseu22/5y9jK+Ub/L
VX2XlpZXsSq0Hm4qYmTdhJwkHHX6Ud6driHJvtOX3waye4upjb5/8XXUuL+STZIE
63/nrDrJ+zMOqhwZ4/ma4KzKiNef/n8dPDTC4BOM2YPVud/JBZn7Jk3MckUT82zW
Pp10wXOgqDgXJ9X1HQMiOFuWq38weBfonTdhACQJa3Jh+K73kVlbhhIIrz6RkVzi
o5M8niD+ysk/CDVGeSKJEqTiWm2m7WyBnPvQwxTWnlGgoy7KtJl0NKw1e+RcGvU7
nSm1tLTAtnuS7A3BANkFSsALFB6nuUOw0uu8cObDZFYKzLKcTwpdEHU8vOMQ2/8M
WojQlWqs
=58Iu
-----END PGP SIGNATURE-----