A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Contact: mailto:security@dalanguages.co.uk
Expires: 2025-01-01T00:00:00.000Z
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/42B1FA4A985338FB5416EE3635FF667099ADC745
Canonical: https://dalanguages.co.uk/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----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=oaUA
-----END PGP SIGNATURE-----