A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@mosparo.io
Contact: https://github.com/mosparo/mosparo/security/advisories
Expires: 2025-01-07T00:00:00.000Z
Encryption: https://mosparo.io/.well-known/pgp-key.txt
Acknowledgments: https://mosparo.io/contributors/
Preferred-Languages: en, de
Canonical: https://mosparo.io/.well-known/security.txt
Policy: https://github.com/mosparo/mosparo/blob/master/SECURITY.md
-----BEGIN PGP SIGNATURE-----
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=kpW0
-----END PGP SIGNATURE-----