A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@heinlein-support.de
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/97D03F8235095AA28BF8BE9738A6F02C8F913EB4
Preferred-Languages: de, en
Canonical: https://www.heinlein-support.de/.well-known/security.txt
Canonical: https://www.jpberlin.de/.well-known/security.txt
Canonical: https://mailbox.org/.well-known/security.txt
Hiring: https://heinlein-support.de/jobs
Expires: 12 Jan 2024 00:00:00 UT
-----BEGIN PGP SIGNATURE-----
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=4H1i
-----END PGP SIGNATURE-----