A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@doctornow.io
Expires: 2025-08-24T07:00:00.000Z
Encryption: https://doctornow.io/pgp-key.txt
Acknowledgments: https://doctornow.io/security/acknowledgements
Preferred-Languages: en
Canonical: https://doctornow.io/.well-known/security.txt
Policy: https://doctornow.io/security/vulnerability_disclosure_policy
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEpCF1gTjEr62V5UnmTgVImHU7pzMFAmTpxoUACgkQTgVImHU7
pzMzyw//cVcq3WqOFQFkp253QiWoIDHKf/Vnpb3BCLuMtQf9sV3UW0nKaUlx3Ibh
LhOxYTt6FcyqjsXBq8Z8i2Oho/y+7OW8Xs3yVwu34EyFEoNok9qV3wHzZGYu4u08
COdEGxx37QQczae2zfVTk5WavO88jgxuVx8tAD5o6ooJnZzCLFngWMH14yUBq0SA
JbzlDn90I9jAI3uRjIpzz0BxFyjSEyigLwa4A71a9azewBjfq+etDR6kXoDUw92t
pvqLyzuhu+wMRHYNI7KQnFlk+DA59UwU/tB0R4J3RSrdXJ2n1DD8YClumi1K50MW
cjZi8g+y6F8xwsBL3DOs7Pt75pbMWHveJuLy0ueO5tSEel7+hpbFpKzF/K9dpHJx
uH7vKsU5bARVGTxdUN/r1pk4lDLKqAiErD6bYjWMHf/xKscoUcuT2JSAibc2SnUT
LhQ7oZ+kXPBoWPcDBR/GBdL+w4fXsBTlK0puO/g0CiCISyOyjHaz7mEfmBGzwEIL
i4/+m4oQvYw11pgeaIoGJNu1GVy/eD2L6WZkcjhAGeByVymFUXE8PTnRPmu4eZ3z
V9rq/x4bhikq0NgdTdIt5GEnuLIzFY9uAULwZTiBqT+QgzkBMFc4nOIJjkNsnmUF
1cpteOkDmKLAEaNvP55ODuq4+MxhP/q32m4qvSxbOgf+w+HDaQ8=
=LO0/
-----END PGP SIGNATURE-----