WHAT IS A VULNERABILITY DISCLOSURE POLICY?

A vulnerability disclosure policy (VDP), also known as the Responsible Disclosure Policy (RDP) is a legal statement by a company, that describes how a company will process vulnerability reports submitted by ethical hackers.

https://blog.hackenproof.com/industry-news/hackenproof-guide-to-vulnerability-disclosure-policy/