A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security-reports@10xgenomics.com
Expires: 2027-02-01T20:00:00.000Z
Encryption: https://www.10xgenomics.com/pgp-key.txt
Preferred-Languages: en
Canonical: https://www.10xgenomics.com/.well-known/security.txt
Hiring: https://www.10xgenomics.com/careers

-----BEGIN PGP SIGNATURE-----
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=5CgX
-----END PGP SIGNATURE-----