A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Found a vulnerabilty / bug, please inform us 
Contact: mailto:cert@vulnhunter.com
#
Preferred-Languages: nl, en
Encryption: https://vulnhunter.com/pgp-key.txt
Canonical: https://vulnhunter.com/.well-known/security.txt#
#
Expires: 2024-01-31T22:59:00.000Z
-----BEGIN PGP SIGNATURE-----
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=hwIx
-----END PGP SIGNATURE-----