A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@sion.info
Expires: 2025-12-31T22:49:00.000Z
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/04AA8285A58F3806A8A79FCF879B28E344BE3BB8
Preferred-Languages: en,nl
Canonical: https://sion.info/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEZB8onaNH4h12qE4U9TIPx5UKb10FAmFd8S4ACgkQ9TIPx5UK
b1001RAAzsLXT8MG3MDkhWe8xN37exusrDJOE1D+pTy4PhyNya7Hk02Ye2yLZs1a
a9bobqp0QSx4MBEgE+tpbqBtrNM2F06Ehwfw1bmetUm+ti6d9wJaKgi2o1C6Scmx
uyP81v6ICtCj2ekgW4/n/x0BDDr6eFDu1TYJ4NWwR12YlVg7ZND1xyH+NMu2rNLu
QKEpvqnB7plXrvAHoPRIA3CQTqxrENJTE6+2MY1h7O1PAIDb1Z8pRBrbVCVRMW08
42GV9KOE59rZglKMZ3Tf3O/s5t+7/n/nC6RZAL3Wntia2p+Jco7zEk/uedVfRq1D
sVm5Scwf9mzlceR1fK2FL+po9n7eb0NkYOSw9piXMwDdxUQBwEsVD3JwzrcpXM66
FJnOce8Q6IrOEMdFLaKX2x8zmyWRawRx8WsHGwSsiQNk/U066yUB0hp5Lh457E7s
GTYpEWDPSuRpxGpyWQ6XKcI6wKfmgjFAA2763XL4+e+CTC2EBRAwCjUkJFxgjnvT
OcTKfdBZPoidU9ItUUO4ldD4IPYewxzQwnw2DaghsN2TnzmSUhcl8goNbaVR1Emq
7ALoqXzc7qsrvry4llyQdoRpblX5f0UySH9JCQe4dpiAmY8NSa69oOfq1bwX+W62
afP3DqA7ke2q3ORuRX1uOjZlakpbtP+OGN8utUB9UZREyX7NQQc=
=tx7G
-----END PGP SIGNATURE-----