A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:ad@xput.net
Canonical: https://www.xput.net/.well-known/security.txt
Encryption: https://www.xput.net/.well-known/pgp-site-key.txt
Expires: 2024-09-26T05:45:39.771Z
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEE0urgddU4Vu77iOWblLhutBcUO7oFAmUScAUACgkQlLhutBcU
O7qndQ//cUeuM3+N2f6u2ACTDZE98QIp48fYFCbPdWCGNK6c2ayfTR044MHT2qeF
JijK8NkxmhDSI0Ujm7rJf6nurSFX53qcePRd/2RZNqzoZrdTkn9tJrVYEhUezeRl
rv0cqx7TRSg2QKp0XoWndLMiYyV+fUUxB+pdV7fpT+ldfL/cIMySsEwmy8xw8Zlh
oXDQTpGDZcLuPTEDU7kEjs+JKiGi3zJVFcDXACMA/5GmfdfTQwzqY/iMUVRdarFt
4U/n1s8N9M115px5bEItdaX8OA6HX83xsFP4/bvAK2xzVJuALzF96vkzSG1sm1xf
95cHhHT7k7iZ2QDtppfvCtOx85rNfx+GlmX4p2X9258EsS1keFytF7VALe6Rt/i4
6lgzHDb1SWv/51TzemcvGH7ZLh+7HOF86fDFOZ79gPhqfJQEOs+0ry61xwNdoC3W
UDNwHu5hRQjxCC3fXTFFURBVw+jbVN63scNjW6N0kXLkpb2US4W/WLympOpFikXB
YRA6IcCDtzwCx9H3Fwt91POl3iq7j9MGmuXsx62IKo6AUcnN1jPc5SA5RYCc3u/Y
mzrcoMWzhsyCkaLLjQ66M8RYon2rpag/v8SA57GEDtNPQsKhTZjsYvViyitj9nUq
3sz+9HFCjBV4WyAxJA/ejIp4waDSU0FKtt8UjTT3y0VMY0pdTes=
=iUA9
-----END PGP SIGNATURE-----