A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Monzo Security Bug Bounty
Contact: https://app.intigriti.com/programs/monzobank/monzo-vdp/detail

# Monzo Security Bug Bounty Guidelines
Policy: https://app.intigriti.com/programs/monzobank/monzo-vdp/detail

# Researcher Acknowledgements
Acknowledgments: https://app.intigriti.com/programs/monzobank/monzo-vdp/leaderboard

# Monzo Security Contact Address
Contact: mailto:security@monzo.com

# Preferred Languages at Monzo
Preferred-Languages: en

# Monzo PGP Public Key
Encryption: https://monzo.com/.well-known/monzo-publickey.asc

# Careers at Monzo
Hiring: https://monzo.com/careers/

# Location of security.txt
Canonical: https://monzo.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=OTjg
-----END PGP SIGNATURE-----