A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Please report abusive content (including malware, spam, etc) via https://auspost.com.au/about-us/about-our-site/online-security-scams-fraud
# If you would like to report a security issue, contact us via:
Contact: mailto:security@auspost.com.au
Encryption: https://auspost.com.au/.well-known/pgp-key.txt
Acknowledgments: https://auspost.com.au/about-us/about-our-site/responsible-disclosure
Preferred-Languages: en
Canonical: https://auspost.com.au/.well-known/security.txt
Policy: https://auspost.com.au/about-us/about-our-site/responsible-disclosure
Hiring: https://auspost.com.au/jobs
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEI6r90YJBbx6x7gKqP3O+BpLxS78FAl6eU58ACgkQP3O+BpLx
S79aKw/+KCm+suhcdI0d4FmmRUemoChaBtdmoLlaq39TZgevjGWDA0+hFIBvgbK4
DZe3E7n0O0ScVhhkM3QtUl4woGh2BdP6hLSY2tPtDYhC7l7CsyJPeDD+Bnw7wHBx
e4rB5tqcIx7y7e8bFrmf+J1bSe2rmx6JR/a1amYvoe4h1I9LKAMhCcc5oLYEu8aI
wxHYUkwaiIFF07d3khrleXKtP+V3nJoILQLU6Z0tYN2PUva4KMvKV2Cj1PQJ6MV/
9UA0zuDF9DCqOiNhAdaf8zS9itk7Uy6EHCsqiSH/I3UIOXMTofbnyNWLf6lvYfTA
Kx2/ovR4bzk76TVKQmJrs15Wqo3PrMwY06eATrfPwa06HiNOGLz+y0auSU+vBnah
SXHFVbcojVDtOJwxVs6wB/Ug+frUeyRXu0l2VCzTFBRqE6OF49LZ3vo8vbEZl58F
YxQdUD7Niln0UBS9Vkeg8759f9chbRHyugwQlfRkGaXhYpa7v5aQxF27k/TPuoNV
SAUpUjGeToslFF+OE7TPs91F8DL2A9vatsOCg+IiF5Cgm9QE0jfr4hMBdIq0oT6e
+zv9K3sfzA5Uz+gv8q5gg3W+gAfA+z1rbFdE/slyypKsmEUwZ4qwOYGwXEltV0ec
zO/xXYbKavqu04l2d/xtJX1mLIdSRoVgMEDerWsX8yIgG/Ta4Hw=
=fCrf
-----END PGP SIGNATURE-----