A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# About this website: Anyone can easily create a homepage with https://bt-web.com/
# Date created: 2026-02-10T08:20:37+09:00
Contact: mailto:rfc9116_security_txt@bt-web.com
Expires: 2026-07-10T08:20:37+09:00
Encryption: https://bt-web.com/.well-known/pgp-key_h-c.cyou_20260210.txt
Encryption: https://btweb-demo.com/.well-known/pgp-key_h-c.cyou_20260210.txt
Encryption: https://btweb-demo2.jp/.well-known/pgp-key_h-c.cyou_20260210.txt
Preferred-Languages: ja, en, zh
Canonical: https://h-c.cyou/.well-known/security.txt
# coming soon...
#Policy: Policy: https://example.com/disclosure-policy.html
#Hiring: https://example.com/jobs.html
#Acknowledgments: https://example.com/hall-of-fame.html
-----BEGIN PGP SIGNATURE-----
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=mjjy
-----END PGP SIGNATURE-----