A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

#Acknowledgements page will likely be created once relevant
#Acknowledgements:
#Contact SpyderSec in the event it is necessary using our contact form
Contact: https://spydersec.com/contact
#GPG Key to be provided upon legitimate germane request
#Encryption:
#Hiring
Hiring: https://spydersec.com/careers
#Permission
Permission: none
#Policy below
#SpyderSec's policy as it pertains to responsible disclosure is that ***you do not have permission*** to actively attempt to identify vulnerabilities on any spydersec.com hosts. In the event you deem it necessary to communicate a security related concern as it pertains to SpyderSec, please start the conversation using the provided email address and know that your efforts are in fact likely to be appreciated.