Glossary: Vulnerability Management and Monitoring

responsible disclosure policy

Also written: vulnerability disclosure policy, VDP, disclosure policy

The public page where an organization tells finders how to report flaws: scope, reporting channel, rules, safe harbor and what happens next. Kettle & Crane published one after a stranger emailed Priya about the order-page flaw.