A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

**\   **\           **\       **\   **\
                      ** |  ** |          ** |      \__|  ** |
**\   **\             ** |  ** | ******\  *******\  **\ ******\
** |  ** |            ******** | \____**\ **  __**\ ** |\_**  _|
** |  ** | ******\    **  __** | ******* |** |  ** |** |  ** |
** |  ** |**  __**\   ** |  ** |**  __** |** |  ** |** |  ** |**\
** |  ** |** /  ** |  ** |  ** |\******* |*******  |** |  \****  |
** |  ** |** |  ** |  \__|  \__| \_______|\_______/ \__|   \____/
\******  |*******  |
 \______/ **  ____/
          ** |            https://UpHabit.com/careers/
          ** |
          \__|


Contact: mailto:security@uphabit.com
Contact: https://hackerone.com/uphabit
Preferred-Languages: en