A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: https://keybase.io/caviidae
Contact: mailto:caviidae@outlook.com
Encryption: https://caviidae.dev/.well-known/pgp-key.txt
Encryption: https://keybase.io/caviidae/pgp_keys.asc
Preferred-Languages: en
Canonical: https://caviidae.dev/.well-known/security.txt
Policy: https://caviidae.dev/security-policy

-----BEGIN PGP SIGNATURE-----
Version: Keybase OpenPGP v2.1.3
Comment: https://keybase.io/crypto

wsBcBAABCgAGBQJdR+B3AAoJEEVAyg/gMqFuD6wIAKgrUMknfh6f3uZvW41b17Xt
lyFDe9Q7OCMKoRnsJSS07BHkyYnnEk9ViAFPdM7yXGlKU+X5p06uCCZHPk/pSURH
F9zxwIVUVJa7SZgmrGn8oMi7StFYCLf+SInao3jO8R018wcowRcfWrKxL1XTROEL
Ihft+QmwP+3SN0tOHfmzdqOrOhzIcuCmESeBDtHZu+ZRLS783d5bIs3WskWoAIqG
i9WdHuqXtejwYNtnudKPznYau2TD/LGfWheoeitcbsJPa89TYm0fCIlRaXNNDIqK
FBRxOesL1hhP+f5RBrBVBQlXsj6jzv6RRrB2q+BVW/UiXg40tPsb8nQphRH9r70=
=45ww
-----END PGP SIGNATURE-----