A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# About this website: Anyone can easily create a homepage with https://bt-web.com/
# Date created: 2023-09-10T08:20:33+09:00
Contact: mailto:rfc9116_security_txt@bt-web.com
Expires: 2024-02-07T08:20:33+09:00
Encryption: https://bt-web.com/.well-known/pgp-key_nfc0119.com_20230910.txt
Encryption: https://btweb-demo.com/.well-known/pgp-key_nfc0119.com_20230910.txt
Encryption: https://btweb-demo2.jp/.well-known/pgp-key_nfc0119.com_20230910.txt
Preferred-Languages: ja, en, zh
Canonical: https://nfc0119.com/.well-known/security.txt
# coming soon...
#Policy: Policy: https://example.com/disclosure-policy.html
#Hiring: https://example.com/jobs.html
#Acknowledgments: https://example.com/hall-of-fame.html
-----BEGIN PGP SIGNATURE-----
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=4Fz5
-----END PGP SIGNATURE-----