A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: https://www.maxh.name/contact/
Contact: mailto:security@maxh.name
Encryption: https://static.maxh.name/maxh.key.asc
Canonical: https://www.maxh.name/.well-known/security.txt
Expires: 2024-12-30T23:59:59Z

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.2.41 (Darwin)

iLUEARMKAB0WIQTuG2heZc7/OLcGMfUuH13bza8lvAUCZlvopAAKCRAuH13bza8l
vLMsAf9bXKMQltKwUA2sTQaW/jCoTD8jFJx/C+bxWyLCCxbU1Ed5efIWQTlW9Hyi
mUJD6BwR6bcEjHp6PuWRZDdV8UPRAf9pybPiyPyAE/dvbyFswOOTJhbMXXu2Pd26
vtkdWYOVagA9vew9Ar0cRUaB1X1v8OJj1e+Ll/KVdLNRlNRzbbjw
=2XUO
-----END PGP SIGNATURE-----