A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# About this website: Anyone can easily create a homepage with https://bt-web.com/
# Date created: 2023-11-10T08:20:46+09:00
Contact: mailto:rfc9116_security_txt@bt-web.com
Expires: 2024-04-08T08:20:46+09:00
Encryption: https://bt-web.com/.well-known/pgp-key_tk-sekkei.net_20231110.txt
Encryption: https://btweb-demo.com/.well-known/pgp-key_tk-sekkei.net_20231110.txt
Encryption: https://btweb-demo2.jp/.well-known/pgp-key_tk-sekkei.net_20231110.txt
Preferred-Languages: ja, en, zh
Canonical: https://tk-sekkei.net/.well-known/security.txt
# coming soon...
#Policy: Policy: https://example.com/disclosure-policy.html
#Hiring: https://example.com/jobs.html
#Acknowledgments: https://example.com/hall-of-fame.html
-----BEGIN PGP SIGNATURE-----
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=Dqqz
-----END PGP SIGNATURE-----