A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@disruptive-technologies.com
Expires: 2023-10-31T23:00:00.000Z
Encryption: https://support.disruptive-technologies.com/hc/article_attachments/360011914933/publickey.txt
Preferred-Languages: en, no
Canonical: https://www.disruptive-technologies.com/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----
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=8tft
-----END PGP SIGNATURE-----