A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Canonical URI
Canonical: https://wire.com/.well-known/security.txt

# Our security address
Contact: mailto:vulnerability-report@wire.com

# Our OpenPGP key
Encryption: https://wire.com/vulnerability-report-key.txt

# Our security policy
Policy: https://github.com/wireapp/wire/blob/master/SECURITY.md

Preferred-Languages: en, de
Expires: 2023-10-01T23:00:00.000Z
-----BEGIN PGP SIGNATURE-----
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=Skhx
-----END PGP SIGNATURE-----