A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@fortanix.com
Expires: 2024-08-31T22:00:00.000Z
Encryption: https://www.fortanix.com/trust-center/pgp-key
Preferred-Languages: en
Canonical: https://www.fortanix.com/.well-known/security.txt
Canonical: https://www.fortanix.com/security.txt
Policy: https://www.fortanix.com/trust-center
-----BEGIN PGP SIGNATURE-----

wr0EARYKAG8FgmQUYh8JEL25d+oPc7dnRxQAAAAAAB4AIHNhbHRAbm90YXRpb25z
LnNlcXVvaWEtcGdwLm9yZx9P0vJot1M6rBS/7YYWVnnPwHVf7rytR9PjgzN9Xi9U
FiEEzyw+xSK4LpFhm6n/vbl36g9zt2cAAFRgAQDwkNbhHdgiIqQ1TpaU3mrM22Fq
yqNXBHCJ3wKYS862kAEAsHOsDS1/35l8gT4YDIhEbNepRAf7VT3nPJAQwElW2AE=
=5od/
-----END PGP SIGNATURE-----