A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Canonical: https://www.axonius.com/.well-known/security.txt
Contact: mailto:security@axonius.com
Preferred-Languages: en
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/F88C3C1EEFFF38141272B6BE40288F6EE365AB42
Policy: https://www.axonius.com/vdp
Hiring: https://www.axonius.com/company/careers/open-jobs
Expires: Tues, 31 Dec 2024 11:59:59 -0500
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEE+Iw8Hu//OBQScra+QCiPbuNlq0IFAmVp6K8ACgkQQCiPbuNl
q0Lytw/8CIlJFkDskkbnYiOHk++ySGxyjqBJrf/vB8LBs142QTG8YZXOfeiwAOkr
LpzI7vUTvy/tHNN9qzYYafslcCHsvS12wl9MDbCzir6Ya86h9R2/wUKdVeBZmjG2
FK7n6T9CxiWkQBg3+aqCiLZPf5wYjYYTThVwYqj9xnRupJXk5UHngK8xQ763c7bG
FOX0cTBzJkIB6Rf656gb8+MpelNH22bCC+/cWkUkbPxFhgDiiyKs8HgmyrwWQtgz
bOiFPL29/vZyzKluHNCP8XpluebHnr2TXY/FLLVAv/UVzN/zDUoxpD1PUY2rQbx2
vw5SLBFg5wevoN38KcubChHb0G4FKpJF15T+pK3n9GfK58LnwR7JQyaYb63mxRKv
jNGbkj/rpY4UXoPSAHPMT/Ne/mTWaXYhQvtr36O4rhGy1dc6i9iL/C/E9o23ew/x
qkoDLmJb0SbZBDCJK7gxJDPxucaIRlgYi9POT1F8o88jaMcI+ciIAHamJaeZb2bb
OjdflB0V/cphjEJAZ6a7cg8UDi+Dx9nBiKQtiUGX8SBkwDwY7GXsNQzbXhqw7OZ7
hZFFjth8fls/aIdqfsHynF2EdFLXXvV+8ZNqaOOQJN3H4jh1rPPh9kM9+/eSX8lL
Uwr/QLy51URJ99nVzwLvm8mVPnqa2NDY2DQSRyc4uKy7Ns0eAIU=
=dIC+
-----END PGP SIGNATURE-----