A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.
Contact: cert-vw@volkswagen.de Encryption: openpgp4fpr:77543586A8BB4322D8AFFB3E6DE6FE3812048E53 # For car related cyber security reports: Contact: vulnerability@volkswagen.de Encryption: openpgp4fpr:D0AC2C3AF29F0ADF6C29A4813B9A1579D6BB6544
This policy crawled by Onyphe on the 2020-10-05 is sorted as securitytxt.
FireBounty © 2015-2025