A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# About this website: Anyone can easily create a homepage with https://bt-web.com/
# Date created: 2025-03-10T08:20:38+09:00
Contact: mailto:rfc9116_security_txt@bt-web.com
Expires: 2025-08-07T08:20:38+09:00
Encryption: https://bt-web.com/.well-known/pgp-key_btweb-demo.com_20250310.txt
Encryption: https://btweb-demo.com/.well-known/pgp-key_btweb-demo.com_20250310.txt
Encryption: https://btweb-demo2.jp/.well-known/pgp-key_btweb-demo.com_20250310.txt
Preferred-Languages: ja, en, zh
Canonical: https://btweb-demo.com/.well-known/security.txt
# coming soon...
#Policy: Policy: https://example.com/disclosure-policy.html
#Hiring: https://example.com/jobs.html
#Acknowledgments: https://example.com/hall-of-fame.html
-----BEGIN PGP SIGNATURE-----
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=//gq
-----END PGP SIGNATURE-----