A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# My name is Colin, the webmaster for this fine Web site.
# For all security-related issues, please email me directly.
Contact: ccogle@vectro.it

# This is the canonical domain.
Canonical: https://decadesbandrocks.com/.well-known/security.txt

# I highly recommend that you encrypt emails sent to me.
# My work key is linked below, or you can find it on keyservers.
Encryption: https://vectro.it/contacts/ccogle@vectro.it.asc

# If this Web site doesn't have a humans.txt file, it
# definitely will after I fix whatever you're reporting.
Acknowledgements: https://decadesbandrocks.com/humans.txt

# I only speak English, C++, and PowerShell.  Sorry.
Preferred-Languages: en

# Not sure what you're reading?  Learn more about security.txt
# on Github, where I contribute the occasional thing.
#     https://github.com/securitytxt/security-txt
 
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEERASZ7KOR4ZiNgtKI5kd5lzggeCMFAl5pFjEACgkQ5kd5lzgg
eCPC4BAAi6RzzT7Px1mEMUFD8alcJYcJHhSpyciFDwRQ06wi/KIgycrNwvm1eSef
e0k4GqTe+J/MyoAhXTndQqRIkuC52G+OWYJAnEAwlgWpha+xmmuVJnqrZRLRAYPI
+A47lnmiteNfHC5TCO0f2Vpb5cUeh8ePHRhKRANpjiybBRakpwC2t9G8heJR/oJe
9KCdlKqZHYGBfiAqcA/lcwJEg+DJaK3PSI1NZOKNpsk0Px9ryvxNxfOFWwuDrHp4
/oZq8h2mkA+bir4dvgqjTXY0o6dhtNfsEE7phfBpjlw967F2qvCyEhpaIOekLA1h
Fq6eD8TKs9WyW8Dlv2HRmpAJLRGcFxZSJo0JoLJI8bdQvvzLoCfKpsVTO8BXMjes
9RJe+sMc/Ag+LIX8qQBkxTvp1sR/R4ozosoMtlrDoVt5nbP42maN2RSyoiPfoR3l
UuETYBmob+w/qz42IuPENHsLul/jO07KKdQWd8QdTnrzc3pbpHnuf18KAg5jpcFW
tfS2gAOyVzcJKShNwfJzQ1X7bP787aKrOUQmlJ6Qk212QA0wgfiBOh/HjiXTcEcR
ORab367hSquRctGlcda19aGba/M29/JxJOvk9LDARtTB2zTyUCDQmdgERwmT6UTj
0eEYRk98XstWIb6WXBgF2hrLtZcERT4JKv6dxeBBRjiUeN87DPc=
=4s7m
-----END PGP SIGNATURE-----