A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:me@sigfriedseldeslachts.be
Encryption: https://sigfriedseldeslachts.be/pgp-key.txt
Preferred-Languages: en, nl
Canonical: https://sigfriedseldeslachts.be/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=7LGs
-----END PGP SIGNATURE-----