A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security-reports@new-work.se
Expires: 2026-04-01T22:59:00.000Z
Encryption: https://www.new-work.se/.well-known/openpgpkey/nwse-security.asc
Preferred-Languages: en
Canonical: https://www.new-work.se/.well-known/security.txt
Canonical: https://www.xing.com/.well-known/security.txt
Policy: https://www.new-work.se/.well-known/rfc-2350.txt
Hiring: https://www.xing.com/jobs/search?keywords=%22NEW%20WORK%20SE%22%20Security
-----BEGIN PGP SIGNATURE-----

iQJOBAEBCAA4FiEEfnw1fKXUkVvEB/azTemLVVKlC5IFAmf3wWMaHHNlY3VyaXR5
LXJlcG9ydHNAeGluZy5jb20ACgkQTemLVVKlC5J2Rw//Qgx8/Li0BayF3X/+QGMk
noDXLOivnqlKaxEEkPeZFjj9Qaj4AqlbPY1FUgYYEt43T6oiHhzrRI8PZ7gk/3fr
6yx0wQ4pIwh8Jam8ddgsXve1VkkGsXr05uwrIsNU/+ggoMop0H/bLUah0M/o+eXB
Hz60S1Ictoxsi9upzrmn9ZHbAJ+zKb7WAY3tRz5O87uycP7lL81ZxbojLDsQ29q+
L3XEgfEuwakAfbPkDAtySnqf1YkpO2JwwQ8buXZX20w8+W1olF3MWho66h5wCp1M
O2bc3yLeousVQa3rgFaPwK1i8TruB1EcvfTGkOgswK2ak/t6+OMudKnsFJfwOXNB
tB7jlTLhxhfbN3WApyzfVQfmaZms09llICajWiGE93wEwq0746VPhyZi/zKU4Gwd
4147iGCk/a4bzUygg2tH61FeUBosFVveSnzFTeCVSvDreYBYnhQcOJfenLUeILSn
jPmhyrOO1nwiliscxHAgRUtABjPcHk211P/vfeINRHGv7WkaHvhesVXToAKjKc9G
OdxWvlqExospHTh2u6DYYk1tF5pbPyzjrFYUGUFXYRPrliHmbJeO0NJ/c4z4w/US
qhQbrgWrg9UUezs2Np2R8WnQBp7naohJQRncVR+Izsa6b4VrR8jPYuBf9SKEF5/9
AtPdIfpRWcY3u1otOMgyuEg=
=H2mv
-----END PGP SIGNATURE-----