A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: https://app.intigriti.com/programs/wolt/wolt
Acknowledgments: https://app.intigriti.com/programs/wolt/wolt/leaderboard
Policy: https://app.intigriti.com/company/programs/wolt/wolt
Contact: mailto:security@wolt.com
Preferred-Languages: en
Encryption: https://keybase.io/woltsecurity/pgp_keys.asc
Canonical: https://wolt.com/.well-known/security.txt
Hiring: https://careers.wolt.com
Expires: 2026-01-31T13:37:00z
-----BEGIN PGP SIGNATURE-----

wsFcBAEBCAAQBQJnnPbdCRDveFyvC50FwQAAw6kQALILzPqwqyku+g2Re28Brjol
vdFPkuq5IzHyuLgwsBLhMiQBZAdiV4ycAnOue2uZuKycc43+Wg5jD6ZNLVFCLoGZ
ufW77Tn0HQBO47VzxO5G0hwpjmaAKDtNdNWH13a/m8+eqiL4JJwVXZPFDn0XoRSy
aMNXMHyWUkvl1kAGDxGUvpr5rxNiPTr1xbPlvjoMp1TYPg/Vm3BiIZhIKp+DSeni
3oFVrC/Hq2Kv3MzCe0UchVeL1yNAoSZtY4bBDlVCKdKLtUZcG+ixhOvOolRAZyBy
82hpqFxhqUjrhfc8PS5CAIf1MYbpa6Dyf/RxXEQJ3O7BsY/+Ij8QDMEUnYlVMzkL
CSskUMuY4JIVPt+xgENpwh7sU3MCyYcNIoVpsQsmTAz+LASB9hLPJT5xYiQzsxy1
TVW+g4DOMhLDJcJNqvUJh8XUBpPfaAU8uOJQQQ+uUggWLHdggrSisSQnRCkhSFNN
dwIdXFngzQq4LdZpHXFfm00AfBYtiSnpgnHnf8VWNbqxXGNrtmfUp/kxA2+2SxCn
YltXPAvqx23gMP1+ZAHLErnfbCBAYECQkG8EWLm6jHykQWy4h1wSxO8k/g+1/uyj
rZnuCTrjq5yELNB5F3jE7XMOeRhdAICrhYDHVPw5lLJK2DI+P7aOEz4VqAWyNd2p
ZQ44rpk/R+M6e6sFK/iq
=WBbS
-----END PGP SIGNATURE-----