A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@fortanix.com
Expires: 2025-08-31T22:00:00.000Z
Encryption: https://www.fortanix.com/trust-center/pgp-key
Preferred-Languages: en
Canonical: https://www.fortanix.com/.well-known/security.txt
Canonical: https://www.fortanix.com/security.txt
Policy: https://www.fortanix.com/trust-center
-----BEGIN PGP SIGNATURE-----

wr0EARYKAG8FgmaWguUJEL25d+oPc7dnRxQAAAAAAB4AIHNhbHRAbm90YXRpb25z
LnNlcXVvaWEtcGdwLm9yZ/gSJSQMu2rc6FXcFagFPHeqfSoxkI2cllxcWJh9bejr
FiEEzyw+xSK4LpFhm6n/vbl36g9zt2cAAHC6AP907wSHYgM0JIHjPeDTUu3M+3HV
yKYXbKrVIy6FV96veQD+PA+1xx49ZkfNbTbvbrshc0p8iEF5bl1W2CAymFtn5Ak=
=k0Na
-----END PGP SIGNATURE-----