A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Canonical URI
Canonical: https://www.defesa.gov.br/.well-known/security.txt

# Our security address
Contact: mailto:abuse@defesa.gov.br

# Our OpenPGP key
Encryption: https://www.gov.br/defesa/pt-br/canais_atendimento/comunicacao-de-incidentes-de-rede/etir-acmd_pgp_public.asc

# Our security policy
Policy: https://www.gov.br/defesa/pt-br/arquivos/legislacao/posin-md-2022.pdf

Expires: 2024-09-07T17:01:00-03:00
-----BEGIN PGP SIGNATURE-----

iQGzBAEBCAAdFiEEPcTzU4rhwBXF1AykXqJWR15j7aIFAmT7dzQACgkQXqJWR15j
7aL4xwv9EV0llD1tQZi3fChrnbqpr8jKxRptZI9upy5RrQZIoyhbj48iyKXONCkl
NTZ+2qeQGg/CdkWX8g3W2TKDU6+aknTHoDgUXHwbhC2tGSZNrPhCbM0NL5+Q7ChR
UHf7DMPf9aEsYKeMmVNbeYEc0tUbTtu+kUdIjstl8vu+2tzlUtDWHi3xvK55mozf
j5mYujkPGl8+aMN+SzAF6U3CbIhnAa4qmrATgk198BVa+R9XMvcZ3jXr93D9Z82O
MmAzoQPJ6wHjrgB4xbpkjk5kV8dsPs9MiNpNa1v/2QAmdVRkByd9BclGj87P+KOa
Qfsw30DLW+0pGItA4kkOrXagzcygwicZ7ML93YaN7fVQ1r4U//fLRTk3Nmnvzwt7
lHfvZx2sos1GMY84xtjqfM0D9sntfg+u6mt8iA2mlTNVB5aqK82XJ07wyRZWnP2b
Q7XN/fbb1tt3flwUniIvQeXGNmoo5GjBxeVrIB2SJZLyuaNT4J+arC7g36IJi227
E4GA843N
=aBvj
-----END PGP SIGNATURE-----