A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Our security address
Contact: mailto:info@saryj.se
Encryption: https://meil.se/.well-known/pgp-key.txt
Preferred-Languages: en, sv
Canonical: https://meil.se/.well-known/security.txt
Expires: 2024-04-27T12:00:00Z

-----BEGIN PGP SIGNATURE-----

iQGzBAEBCAAdFiEEBkb9s0LeAKGn/Dc7TQElv9WkWPQFAmRK4ZcACgkQTQElv9Wk
WPR3gAwAmnu5XYq2W53/OTSY9dE0SzII5d5+plKiAtyv2/JuADBKhHxZc2pSwosq
lEjEnOcOeZTB1L9UpKw6zPca3bNbjchaPtjpnM8v4S0YgUCYtTdDrhQX8ov1AM19
POkDTTeEg7AkvQ3tg06Iy7bh2eMSCdwcK0vkwoNC1EfOrb517AGvZnWBeMgTTHBh
JUjTINGgHX+9Ae3ynHch33Var8TONo3b8gOgDBefU/5H9BrB29AnCO8Gcw/aGTmI
RSKp0ji7fUjzH2rE7jrNx7x/3vyUzKeDYK6XZyu0ebAJKfgSp1vk1+fMZe7p5b7i
3dP8jH5MWRlzTdi1YTJL1r0x9ryt0+L9LGGmV5GJg96IzqtcoJHAEs9mI9ZzMHwg
Egj2i5+b6T7jojnIuvZPl0OdGMaXXzcn2PRQVce9iOU4nsAhrNYwSaRSouIpXgym
jReypBZQFkbtv6GyGBAvhXKSHDhtsUtpbJIDGP5nXtuUwDwwMWC74eTiR/e+MkLQ
r7U8rnmU
=4ocL
-----END PGP SIGNATURE-----