A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@cpanel.net
Expires: 2026-01-01T23:59:59.000Z
Encryption: https://go.cpanel.net/gnupgkeys
Acknowledgments: https://cpanel.net/cpanel-security-hall-of-fame/
Preferred-Languages: en
Canonical: https://cpanel.net/.well-known/security.txt
Policy: https://cpanel.net/cpanel-security-bounty-program/
Hiring: https://cpanel.net/jobs/
-----BEGIN PGP SIGNATURE-----
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=3F+D
-----END PGP SIGNATURE-----