A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# version 1.0
# Lukasz Bromirski / my personal home page & other pages I'm maintaining

Contact: mailto:lukasz@bromirski.net
Contact: mailto:lukasz.bromirski@gmail.com
Expires: 2025-12-31T22:00:00.000Z
Preferred-Languages: pl, en
Canonical: https://lukasz.bromirski.net/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEVBv2AKcw1EpJVQiKaa++EphLmgMFAmJymDwACgkQaa++EphL
mgO9dQ/9GPuR5M6kIBfUXcDz0/ekaqEYG/rqgj/WAbvLY9VNoYWFB2nOd1JCJVn9
4SKIQYPz9N+xxYtXaWi9OUrMulRVhXwaMQm6g4ySpJ3rljRtY8lsoapR6HOx47F2
64rwxwZRsLSwByCVuPIuTmreWR1EkLX0Qc48oLVsGgisvloVYxnXBV0hHijPY/5M
YvoCtuK17+u1MEFa4NT7eCb1XlkJJf1UqBdKemWRKD51INh9y1Lo13GC/gxaVxcC
nGrOiXT8Y1++DVw3suClvovurap42VkKr+1HfM8Y2uy7Ym0OzcR6ch5yWSK77CGk
TYy6iHVrkFVeJzG2MY7QFxPG6vaz6DbfR929Cw8ieQJ0/Dyh1JW/r1C9OsUfjiUE
Ha6l33yWotbSKNYuueYWluw1uZt1Uu2EViinHZ/D8WhHv9d1B+ps3KHjYmfzFhuw
nrtTm4QktjerLLV3QvNpw8Dtui8DAj8RVlf7LvqOBoX1ougJ1ZKxzmibK5xXVbMH
EU/NHgK69Oq/7k5Ge+dOAPHSBttijhXaVi1Q1Golt86vvAjsYXIzv+L78K6NNoVb
UqL0SXi4oKUaMzM2RraJ60ZICDgp2vi9Ha18D3G9jmht+7PwfU5EPCtHapLPJqK+
UG5TvPa0Cmqv1wEua6jeDpjQFaRgAi1EFEgwTOikdOOQOo3XsvE=
=oGH3
-----END PGP SIGNATURE-----