A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:operativ.it-sikkerhet@nrk.no
Preferred-Languages: no, en
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/85EF44309CC0DFC4F7E04393E7BCE5AA9411C063
Canonical: https://nrk.no/.well-known/security.txt
Acknowledgments: https://info.nrk.no/hjem/responsible-disclosure-policy/#security-hall-of-fame
Policy: https://info.nrk.no/hjem/responsible-disclosure-policy/
Hiring: https://info.nrk.no/karriere/
Expires: 2025-03-01T09:00:00.000Z
-----BEGIN PGP SIGNATURE-----
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=9KWL
-----END PGP SIGNATURE-----