A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Canonical: https://www.logslkn.com/.well-known/security.txt
Contact: mailto:security@mindtouch.com
Encryption: https://www.logslkn.com/@app/security/pgp.asc
Policy: https://mindtouch.com/disclosure
Preferred-Languages: en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEpYCPnoUJlEPnHbH1kXUfwWYpjsgFAl8HMX8ACgkQkXUfwWYp
jsimTAf9FI6y+lpcpNHBAm3PG6Ep8EtzcICipQ4S90Is/kBtO/V/MZUwlSrZlyOu
zcIIicoiWbIJcCsg3Rmdk497G3hq7/UPQpx8AkYLqv46slTXJX1vt0npHrrKqMON
voyhwir0G//7jXFeHjcUWcenQ9talzMK6n2oYHMN9BdLcIzXRjJswSntD8Ds9adC
HtYTfw9PjozVvlRZGQjD5tG2XizTUtkXHntU5K0buh2YuyDr/lVcby1srnLi+Wg3
e6hM1rh9N8+RyIT4KfFenmrMuPL7StccuoWdQXYrDJCUvfQOHz3QXjPpaVW+N/5M
x39FbU4bq0x4LA6WO0Qg6VjUGAJFig==
=c1ED
-----END PGP SIGNATURE-----