A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:contact@psydix.org
Expires: 2030-01-01T00:00:00.000Z
Encryption: https://psydix.org/pgp-key.txt
Preferred-Languages: en,de,es
Canonical: https://psydix.org/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=CuDv
-----END PGP SIGNATURE-----