A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@pod-point.com
Expires: 2024-04-28T22:59:00.000Z
Preferred-Languages: en
Canonical: https://pod-point.com/.well-known/security.txt
Policy: https://cdn-www.pod-point.com/PP-DEVOPS1-Vulnerability-Disclosure-Policy.pdf?v=1681812280

-----BEGIN PGP SIGNATURE-----
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=aqh7
-----END PGP SIGNATURE-----