A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

 
# My name is Colin, the webmaster for this fine Web site.
# For all security-related issues, please email me directly.
Contact: ccogle@vectro.it

# This is the canonical domain.
Canonical: https://rubyandthewolves.com/.well-known/security.txt

# I highly recommend that you encrypt emails sent to me.
# My work key is linked below, or you can find it on keyservers.
Encryption: https://vectro.it/contacts/ccogle@vectro.it.asc

# If this Web site doesn't have a humans.txt file, it
# definitely will after I fix whatever you're reporting.
Acknowledgements: https://rubyandthewolves.com/humans.txt

# I only speak English, C++, and PowerShell.  Sorry.
Preferred-Languages: en

# Not sure what you're reading?  Learn more about security.txt
# on Github, where I contribute the occasional thing.
#     https://github.com/securitytxt/security-txt
 
-----BEGIN PGP SIGNATURE-----
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=Bin4
-----END PGP SIGNATURE-----