A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@play.date
Expires: 2023-10-06T07:00:00.000Z
Encryption: https://panic.com/.well-known/panic-public.asc
Preferred-Languages: en
Canonical: https://play.date/.well-known/security.txt
Hiring: https://panic.com/jobs
Policy: https://library.panic.com/general/disclosure/
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEE6i1R0iW3pPNCW77Iq26O7ibMLj0FAmM/XhUACgkQq26O7ibM
Lj3PtggAnAZWHFyhUEIiZcRZRE7mFz3AoGZoG7eHYKRXnTc6YrtoA4k0p1jPlPwz
SrVDO+7Mv+UZKQoDHVsnOSnHUYnKaA/g2ndOz8Y1usZxjUiTER8q0xhJvgLV6551
662YKXuw+GDFvSIGSrv9VwpwM4RCMqLGPZQyf2R54es5ZrKMYi3UDH8beQpGoJpz
KTrCFYVV1ese+j7D1NXxPADBZfatU43Rh5bIqxWEpCM6UYJgqnxc6LJ5DotwKKxQ
Gkbn57DvlECJD+m5e8+EupBI7J/3L4BDibHewCVrVH4mkPI2p3s1vLRRzKm/0rep
PRM7gY1i02Phw88MBdcC0aGlqc/zmw==
=Xa1K
-----END PGP SIGNATURE-----