A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:me@jakluk.me
Encryption: https://jakluk.me/assets/pgp_key.txt
Preferred-Languages: cs, en
Canonical: https://jakluk.me/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEOgP3LAfCwdA6udvsUIKt/pNU7ZMFAl5EiTYACgkQUIKt/pNU
7ZNXdg/+NNWe0gnn9/PuvA9Lax9u4VlKTeZ3eHUTI1iF1TV79XqpwjcoxbaVlOWa
f13RYHSY0fddaOyJGbu6ioVeBE+ynUFkkCJCnphRa0TBHCd1kixAeLM8oZ0k+J+S
6aPKtMImKEzv4sxRPqKLO4nq5MSPf5F6TnSzsgks52peEo3xae4SH6GpXTfVg/jo
Nrys5jxTmSYnJEihqTa/nFGrm60Tz1oBIfNUNb2BN9NA6HXIkKyuvX60Sx8ErtKK
re0YjA7Vdb6MiQOnaX5e9X/mR9xdc09ZNtSx1owoXdulz9WxcHp9vjNcNQz3VDDs
VBEFf4eCL0sodhp7rLmm9CRjbjlDzl6H1NGWSXrP2N3cfZy+lckGrJLVNByVCKcV
34EgWqZwBKTsMDxvJvSPrNWBgWpAimLZyppO+FrSJN/iUvABZ5FOuI57lBDXgz9t
NBS8HUeyFVPIJamkM+L0ZMF+dqXDIe70nl9cLVUxmuSSRxx8W/U3t7cm3q8SLzE0
l+/2lyM0A97Y5P+0wA1KGZkx5NmBVGxckz9uSNQ+vuBUDxVFjdwAuitIfy+SSp0X
bovk1muexnlrTyVjQApUoHtnOZ0TnSh0vFGuki0sLftNCSTgG+bbRp0dBvPGnzEx
7eT3ISkzSkq+SQPcXmqXiasJKrvBHqetk1KR1s6b7jUJzMmXN0Y=
=near
-----END PGP SIGNATURE-----