A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:kernel@usrspace.at
Expires: 2024-06-01T00:00:00.000Z
Encryption: https://www.usrspace.at/kernel.asc
Preferred-Languages: de,en
Canonical: https://www.usrspace.at/security.txt
Canonical: https://www.usrspace.at/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=EgJH
-----END PGP SIGNATURE-----