A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:admin@shadowkitsune.net
Expires: 2025-02-01T07:00:00.000Z
Encryption: https://static.shadowkitsune.net/DeathShadow--666_0x70B7F848_public.asc
Preferred-Languages: en
Canonical: https://shadowkitsune.net/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQRT8vGyRISzVVuGyW+kwV6KcLf4SAUCZdMrMgAKCRCkwV6KcLf4
SEpTAQCpSb1EbGr3xXks/N7PlK8cRdFZyyiOYVdfdgK5Y2MrtQEA5ZJRpVO13jah
ncaTViYY9KweEE8mFutgB1+JEDf9FgM=
=6TTv
-----END PGP SIGNATURE-----