A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# About this website: Anyone can easily create a homepage with https://bt-web.com/
# Date created: 2025-04-10T08:20:37+09:00
Contact: mailto:rfc9116_security_txt@bt-web.com
Expires: 2025-09-07T08:20:37+09:00
Encryption: https://bt-web.com/.well-known/pgp-key_h-c.cyou_20250410.txt
Encryption: https://btweb-demo.com/.well-known/pgp-key_h-c.cyou_20250410.txt
Encryption: https://btweb-demo2.jp/.well-known/pgp-key_h-c.cyou_20250410.txt
Preferred-Languages: ja, en, zh
Canonical: https://h-c.cyou/.well-known/security.txt
# coming soon...
#Policy: Policy: https://example.com/disclosure-policy.html
#Hiring: https://example.com/jobs.html
#Acknowledgments: https://example.com/hall-of-fame.html
-----BEGIN PGP SIGNATURE-----
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=ELWK
-----END PGP SIGNATURE-----