A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@stremio.com
Encryption: https://keybase.io/ivogeorgiev/pgp_keys.asc
Canonical: https://www.stremio.com/.well-known/security.txt
Policy: https://www.stremio.com/security-policy.txt
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEErGkr6etuAktcWKjqwelJlrxWus4FAmCAQskACgkQwelJlrxW
us7YOwgAk6SfP3HYLOk75wYOPc7XH72yO3eRDVotRhRbD+G+SqqmiRUmkycULr+V
Xo2I6shRHaroi/Oo8feuwV78Ttnn/MMhSqCSsFDcbEqPolK6U2Gdh4Wgf69rtL50
5FaKHmv9bJjepJfvhOpz53hlXrlTf4WPYjVhEehtXnI2rQ6Qu9s+brCRNNyIYpro
SuvCwwYuUNk5SHvPhaWDwC86R7xz/sCf8bBPWE/tGj1cQ+JpHiuT1mE9T3zBdP5e
D1gmQLI1e1rWYKId3KoE5PWGS6mCY+raZxG5HJ0VHfTXq5hfGpfa8q+ytY5VgWer
N+7ThJUETUFz4/22v1bb6Dvz2m0uNA==
=GewN
-----END PGP SIGNATURE-----