A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@cloudlinux.com
Expires: 2024-12-31T23:00:00.000Z
Canonical: https://www.cloudlinux.com/.well-known/security.txt
Encryption: https://keys.openpgp.org/search?q=security%40cloudlinux.com
Preferred-Languages: en
Policy: https://www.cloudlinux.com/vulnerability-reporting/
Hiring: https://www.cloudlinux.com/about-us-company-jobs/
-----BEGIN PGP SIGNATURE-----
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=q9Di
-----END PGP SIGNATURE-----