A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@infosecpartners.com
Expires: 2024-05-31T23:00:00.000Z
Encryption: https://infosecpartners.com/B430A233F2DBCA52799A4F3A56F33338CBC01519.asc
Encryption: openpgp:B430A233F2DBCA52799A4F3A56F33338CBC01519
Preferred-Languages: en
Canonical: https://infosecpartners.com/security.txt
-----BEGIN PGP SIGNATURE-----

iJMEARYKADsWIQS0MKIz8tvKUnmaTzpW8zM4y8AVGQUCYqpIWx0cc2VjdXJpdHlA
aW5mb3NlY3BhcnRuZXJzLmNvbQAKCRBW8zM4y8AVGaEYAP0YBfF4Vp+CdMwr3ycH
f/5RlS9btCmyjIr4ZFxiY2i0qAD+PCanpRG3C39xi+41FWZhBr7TYc1GxYx4djLW
jDkBMwg=
=wamT
-----END PGP SIGNATURE-----