A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: https://joelpurra.com/contact/
Expires: 2027-03-22T23:00:00.000Z
Encryption: https://joelpurra.com/key/mig-at-joelpurra.se-4C47B4FF173AE6ED0DB733946DF6890D2A977668.pgp.pubkey
Canonical: https://joelpurra.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=86H/
-----END PGP SIGNATURE-----