A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://fruit.je/.well-known/security.txt
Contact: mailto:abuse@fruit.je
Expires: 2023-06-01T00:00:00Z
Encryption: https://pgp.mit.edu/pks/lookup?op=get&search=0xBD3AFCA73C9EE356B3322024F271E0AE6E703D95
-----BEGIN PGP SIGNATURE-----
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=Fukw
-----END PGP SIGNATURE-----