A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://www.deepl.com/.well-known/security.txt
Contact: mailto:security@deepl.com
Encryption: https://www.deepl.com/gpg/security-at-deepl-pubkey.txt
Preferred-Languages: en
Expires: 2024-04-18T00:00:00.000Z
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEa9MA8TeC1OEsNn357L3pjvIrjUEFAmQ9WokACgkQ7L3pjvIr
jUEVsRAAjQ7ERelZ9qwXubkelV0rpUwPuCBws1jEEJVAZZTmdirm14/35tHdzFLF
CXc42iMLtj/rMJtZa9jqFRiLhv967LsHnsUcrQOcbS+ycurpE60VnhRyKggVPC1j
RtpCvxj521eKnDRLxr8noJf6agTt19zBAVdFsvbbIdk0kOLtPDzhDLQxtNkKneNG
h9rZFovdLvEij9krrowcMTvQQ54rhGJTN8W8G4UcHHA9ambzJeYVFVBAqqlCFynr
VFapVjk6Ey4CFZzemItxwqUa9W4doONmfWrE3+LREIBO6tgFdc1se1xteKezrC7h
l3QqSj+IMK5h5v96vU6OXCsKzY6aVAgL3vsiwY66rneraAVxYssRkMyGX8cPjxgf
lGMTMRwvqgQ6SWXTATkEhf1WkLT1epRhu/gWBlvsdnQ5aRXXRhC+1G755KLYVSeh
ju6OmouvsKv+uX6+Nq9w9YHLU749HYspuX+YtVM/5rj2FH/9PLsMY3bIWoFIPr8f
lCHPTvDeeRvB1IrfUsIe1RPI9DW/33ufkXoJnCOGV64TL6f5+vNR8BXBrs4NNs+Q
+ZVb1izsB5jZAuWOBZ9RP5RR1Zoi+qByuLGU1MBa1SKdjYblkcB8t5PW/dTUnL+R
wzX1XdPVt6FzopgHSH03gW9kbyMSDHHLSgDuZRauF4yOEl4RZ80=
=2Xxs
-----END PGP SIGNATURE-----