A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Our security address
Contact: https://www.softcreatr.com/contact/

# Our OpenPGP key
Encryption: https://www.softcreatr.com/media/10-0x06094755199c9784-asc/

# Preferred contact language(s)
Preferred-Languages: de, en

# Canonical URL
Canonical: https://www.softcreatr.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEE1d+2QX017CLvpve0z13dgI33oqgFAlxntFcACgkQz13dgI33
oqgQAg/9F1zkxBQuGpz15QiorgrUkA1nBBTJbESXucJLVwgoBpsAPhDBX3XYPHRy
PN0Jqar1dmAVJEDW7bcG/Wk20Q3jcsX0CnRGnFgyX4EzFhCHL1vj/YUKsui4wYWt
MrCk6KFMu/aXrzRRxertkdrzLfRGXAJSdbedH2iLawt8riMk8vX0Pvzjza8ukoPq
B+zoyuog/EWS8JX9Xfh3bfTzfQmUBGfgAemoChTg1N30y0SO12+N34S0ie8qKnlE
DwNePBb+Ct1NrVilV7LxpDulLANGYxcsfb7UobPYzZemLZObKlL/qf+npLp2ch3m
FmJ26ymwKt6GMoj7qsp/0Fgdr6lg26f/loaKPkljFo988r83EPVw7BZU0c5E1Uv5
AvgVAUMqMo0u4Q9KAciR4liLgrLT0/iLP70h85/oTXdP12NznFQkfDcLqDuGH3qm
m2VgV4o0AnttbLuMWusKIfYyzLePdx2fttFQgseqHDOdCB5o+EjlSSpwgUE2vYae
xOzicUMDeFcIvvK0+MMI7MWHT7nvjrQGDe/cmzBE6ZUN4xs6YjloawXR4IaGZ48V
eL3Ae5FAitTxWPwjlwb+8GhYDVTgFvSgqtGDDSvLBdI6k2oad+kQcf2j+s4K6Dn6
u8vFgdKBSNjz808Ptogys4lHDb/32kOtOTw2MkTznPdraesoggY=
=zGZv
-----END PGP SIGNATURE-----