A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@claranet.com
Expires: 2025-09-14T22:59:00.000Z
Encryption: https://www.claranet.com/.well-known/security@claranet.com.asc
Preferred-Languages: en, fr, de, nl, es, pt, it
Canonical: https://www.claranet.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQHKBAEBCgA0FiEEC22oHPuOQH53tOQeqnDJP6yy+g4FAmTLiggWHHNlY3VyaXR5
QGNsYXJhbmV0LmNvbQAKCRCqcMk/rLL6DlIeC/0eM5CKzez1ZhCqiJffG7LxA9Zd
UKL1vFNZkZ/casf13tTTo8EBbLTyMV18tQICYPgjiWDiAm+0WEpJOqQQ5UqImTA3
HIoLDr5rOGL2ShB+fTqVq2hHVx30J7/2GEven9Dv7QoFaEjPSBgP7BH21105w8/V
mJm9j6euPt2LUHyM84gP3SW94GQoG6mknNr+b0XNgry7SnkSHwba/xptlJENMK9U
OMtVtfDYLRF59R9UISEgLV/FU5tHibyUFqTjTS7Zx4ZmQyEymid21cZwOOw6ivzN
bavi9U2NhM3UVLeM+mtd2C2WKOI1UQLh84RgqJmRqOPGWwWoRm8L4kkkF8618m78
DqwPZxeVUYtEYSmng3EYVVrC9UCvF3L2dwHSE29AsjR2QgmhFK8bq85W2/PzGZjq
psd5b1wztzNQk+ExHuUoUknGppEn9p77NjhUaMVSWaKJzJfvGNv/C04U2VG/qglp
eP4rycDDq6sKWz+TRUukN4OsvL0PclgOXAZUYtc=
=jzz5
-----END PGP SIGNATURE-----