A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: dayid@dayid.org
Encryption: https://www.dayid.org/dayid@dayid.org.asc

Contact: dayid@sdf.org
Encryption: https://www.dayid.org/dayid@sdf.org.asc

Preferred-Languages: en

Canonical: https://www.dayid.org/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEkTN0eVVqejC98mLxmkkg+mjXqGYFAl+F6ZMACgkQmkkg+mjX
qGYDTQgAk4kmSMGSBw542ndO9TP5NvEqeqt1T87Uersz1TYXg8XVpw2sO6jxR8Eq
hNA6LjkwnKlEZiNnQKaRZyeuXEHCPXfHNYMOQ+p8sDO9U8x4vR1BEGAa3UYt39J7
Es7JulERrE0Mq0TYdoWjHY7zg/ZwSA0gzUZhXUvwSJYv4kuF6KhaM2Bteh6xONfH
x58dYbL748+heyR/911IcdQFuiJxnf9Psjs9rfvANSX3vFzzhnfiOsExPr5GYoEt
pVLox5Lxk/QaZSeK5AMbUVOEZjJozBd8IApW1ZH9YAlIpyxdpRqs89MFeRNYG+Zx
QAuPu+1DmMHYWBe2o6FbGUMI0um2Pw==
=Pfx5
-----END PGP SIGNATURE-----