A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:whitehat@benlabs.com
Expires: 2023-12-31T23:00:00.000Z
Encryption: https://security.benlabs.com/pubkey.txt
Preferred-Languages: en
-----BEGIN PGP SIGNATURE-----
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=Opkj
-----END PGP SIGNATURE-----