A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

#
#   ____                                    _
#  / ___|_ __ ___ _ __  _ __ ___   __ _ ___| |_ ___ _ __ ___
# | |  _| '__/ _ \ '_ \| '_ ` _ \ / _` / __| __/ _ \ '__/ __|
# | |_| | | |  __/ |_) | | | | | | (_| \__ \ ||  __/ |  \__ \
#  \____|_|  \___| .__/|_| |_| |_|\__,_|___/\__\___|_|  |___/
#                |_|
#
# If you would like to report a security issue please use the
# contact info inclosed in this file.
#
Contact: david@grepmasters.com
Encryption: https://david.olrik.dk/files/djo.asc
Preferred-Languages: en, da
-----BEGIN PGP SIGNATURE-----
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=Cagr
-----END PGP SIGNATURE-----