A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: security@stendhal.ai
Expires: Sat, 5 Oct 2030 13:37 +0200
Encryption: https://wallkanda.art/gpg/security-wallkanda-pubkey.txt
Preferred-Languages: en
Canonical: https://wallkanda.art/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQRs/Z+YAJQPw1X6YcU4nLqGJ5gqcwUCYHYSsQAKCRA4nLqGJ5gq
c+RNAQCJhV6DPPXL1YvDb57R2Etbcc+SjyW5jkW2pwDv8I72bwD/Z88pfPd2nGcf
ADzZFIuqs0jN3oXmjCJhdzvxWlzTdw0=
=DFPQ
-----END PGP SIGNATURE-----