A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: https://www.nixtree.com/contact-us
Expires: 2024-09-29T18:30:00.000Z
Canonical: https://www.nixtree.com/.well-known/security.txt
Encryption: https://www.nixtree.com/.well-known/gpg.asc

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAABAgAGBQJlF8GfAAoJEIhfyTKap/V9YO4H/jBn1BbSX4Uw8dcfR4DMOfZ0
jHzLJ2P6GPQqko9Dex+xqxMl3vW1zd6wl7taIkgNQfgfJ5GGOAGjAqt0clzFd1jl
gQcBj+Y6s35IPzsFjZVh3j+y8hWWty+oiPP1GJmpjsOSCI71VIi/dctv5cOGMvQG
VFN7RbFISyzy5Us99BtuBfVIXxwv05xBTV5dWT2erqlAAhgAellFqxj6Icwp+xF7
RhMGFAl/6mxWVnbM13u7mlm1Mv9asb2n0vJauxfZJueeLIWeoiq8AV1BantxbFmS
EgVnSeIb0+ze3nis/W8Wg36a4TlVyDroIcAgbVW9llL6zotIdALCWnp3yaMBBjU=
=ew9P
-----END PGP SIGNATURE-----