Glossary: Policies, Standards and Risk Management

vulnerability disclosure policy

Also written: disclosure policy

A policy that tells outsiders how to report security flaws, which systems are in scope and what the organization promises, including safe harbor and a timeline for public disclosure. It is advertised through security.txt.