A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@astaria.xyz
Expires: 2025-09-21T04:00:00.000Z
Canonical: https://astaria.xyz/.well-known/security.txt
Policy: https://astaria.xyz/.well-known/policy.txt
Encryption: https://astaria.xyz/publickey.asc
-----BEGIN PGP SIGNATURE-----
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=rKQC
-----END PGP SIGNATURE-----