A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

# Reporting security vulnerabilities to Peppy Health Limited
Contact: mailto:security@peppy.health
Expires: 2023-12-31T23:59:59Z
Encryption: https://peppy.health/security/vulnerability-disclosure/
Acknowledgements: https://peppy.health/security/vulnerability-disclosure/
Policy: https://peppy.health/security/vulnerability-disclosure/
Preferred-Languages: en
Hiring: https://peppy.health/about-us/careers/

# Please see https://securitytxt.org/ for details of the specification of this file
# h/t to NCSC, MoJ, GDS, BBC, BoE for guidance and inspiration.