A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:webmaster@geekbundle.org
Encryption: https://www.geekbundle.org/.well-known/BEC398A690BC3F0C3A74F5E105A8D540D69AD6E3.gpg.asc
Preferred-Languages: de, en

-----BEGIN PGP SIGNATURE-----
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=Sqew
-----END PGP SIGNATURE-----