A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# This is a non-profit site, please do not expect a bug bounty from any reports.
Contact: mailto:security@alnilam.co.uk
Expires: 2024-12-31T23:59:59.999Z
Encryption: https://alnilam.co.uk/keys/security.gpg
Preferred-Languages: en
Canonical: https://alnilam.co.uk/.well-known/security.txt
Policy: https://alnilam.co.uk/security_issues/
-----BEGIN PGP SIGNATURE-----

wr0EARYKAG8FgmVmK64JEHwuLOfVJlf6RxQAAAAAAB4AIHNhbHRAbm90YXRpb25z
LnNlcXVvaWEtcGdwLm9yZ90sFdaPi2NgHijYFNzf4deH3ou0+80lrmmwjBQrQPex
FiEEkRFmb5ey6iObNT8rfC4s59UmV/oAAPkyAQD/kvh9oakkTr0kCe+R3SkT1Z86
bbNzPtqUTGRqpNxSaAD+NMi+34iuf8U2Y4wAJZqbv00fco1nwHsZZIsOaOtWaQQ=
=eE3q
-----END PGP SIGNATURE-----