A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@synology.com
Contact: https://www.synology.com/support
Contact: tel:+886-2-2955-4000
Contact: tel:+886-2-2955-1814
Encryption: https://www.synology.com/security/DA33F457.asc
Acknowledgments: https://www.synology.com/security/bounty_program#acknowledgement
Canonical: https://www.synology.com/.well-known/security.txt
Policy: https://www.synology.com/security/bounty_program
Hiring: https://career.synology.com/HQ/
Preferred-Languages: en, zh
Expires: Mon, 30 Jun 2025 23:59:59 +0800
-----BEGIN PGP SIGNATURE-----
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=Z0U9
-----END PGP SIGNATURE-----