A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



Contact: mailto:bugs@sorada.gov.ua

Encryption: https://sorada.gov.ua/pgp-key.txt

Canonical: https://sorada.gov.ua/security.txt

-----BEGIN PGP SIGNATURE-----



iQEzBAEBCAAdFiEEFw4wbA7bIFuqXQXyhvwAbvJA1dsFAl6HEjsACgkQhvwAbvJA

1dua+wgAofj5qLiAIG74LQ7ysgSqTtGhw4R1R77nh8Rkfq5jsEDWgfH5Bq1t9WRJ

VcQXDWPEWgrCbW9a8kf2oU6sPzxmB4IlubaVfWVLCC3fD1yZumqIhBb/9DXcV2mP

76DaoJpXhELL6w31MAiPZWEROm2dwj6RFgrlicOngbNuyOhdps+wiveZW62DuaSG

32bAoPX0muw7xBdQqwAZZqetH95ZGBoFL/bgPHGiAjOjKLyLDl3jFFv9+nvcuvjH

SDaTpVHsucDX+7anUlrMF+NAPA33U/QpVj2dNWt7/Y2avwJTcXi/XDydtwCIN95V

zjYvN36aZNQy5FEVZq52W3hMs87LYQ==

=jb+G

-----END PGP SIGNATURE-----