A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: https://pingtrip.com/about
Encryption: https://pingtrip.com/about/4603FCC2.asc
Preferred-Languages: en
Canonical: https://pingtrip.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEms1s+RB0FHl2Qpfcn1y+mr7SOPkFAl90y5QACgkQn1y+mr7S
OPlLGgf/WaLR1cVKF8wfGxyHQt6374rPkTvWzIGni0Oj88oCd8MbKorhKuMqAp75
/UAcVg8qg7cSCBHH9/JkR15e8DiR+B8DYvQslxyXLezJj8wolN3WA4qfGublICEm
bvMf+9op3bh0LpcWMZxIYgUn+S8IFeGxkt6UvzSS5qXhHf0FtyKenm+m/IpnBpKJ
RLOefP+nslECim+CRpsONmsnvCCcJMqik4TI0BrwWd03I6Wu8eO+apxHKr/94Gcc
9NjW35ye0/SZ7OlfKMqj6PFKKv0jpyS5qd72+sy2cRdxuM9XwP0qdvFb5Vh3INma
Xswo5COE2CTvQDcf0LBLdEs65bSoWQ==
=rc+3
-----END PGP SIGNATURE-----