A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: https://social.cool110.xyz/profile/mark
Contact: mailto:mark@cool110.xyz
Contact: gemini://cool110.xyz/write.cgi

Expires: 2023-06-01T00:00:00.000Z

Encryption: https://openpgpkey.cool110.xyz/.well-known/openpgpkey/cool110.xyz/hu/6g4418kppmk18hubyrkf18yyx347nwrr

Preferred-Languages: en-GB

Canonical: https://cool110.xyz/.well-known/security.txt
Canonical: gemini://cool110.xyz/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQRVHI7TjDdoR16ZiyJAZgfjxqeMcwUCZDq+PwAKCRBAZgfjxqeM
cwV9AQDpLVQPzn4JImqz9De1XgQzt9YYKTsV1xYti5fUfSZrfgEA6XxTyxE6vCsN
1Ic3zwqPX6hDIXg0vw/X2NS14bbNVAU=
=PZeq
-----END PGP SIGNATURE-----