A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



Contact: team@cert.at

Expires: 2026-02-01T13:37:00.000Z

Encryption: https://www.cert.at/static/pgpkeys.asc

Preferred-Languages: de,en

Canonical: https://cert.at/.well-known/security.txt

Policy: https://cert.at/de/ueber-uns/rfc2350/

Hiring: https://cert.at/de/ueber-uns/jobs/

Hiring: https://www.nic.at/de/jobs

-----BEGIN PGP SIGNATURE-----



iQIzBAEBCAAdFiEEZBQq8U7GZ4MK3GSrP/W20TO9/VcFAmebhhYACgkQP/W20TO9

/VcGtw//fV2o2Pxz5tXXGTmAVaQxd8DGUoA9n3o6gR2U+G6t26eHSm9Jcej4mFbC

yUmxHiM+c/dqvU1cUheG6TPfnf2oLhfVQkb5RF4ouWo18nY+/IG52WneZPLWGNg7

O/585amWo96y0jvzlSSQxBOI01yiHU3FJALMXYOu3GT9F3LkHT3/nF4OhA7LkvhY

Zaxl4QYS3Q9oTo3Elp6LekZ3D01PyhpqVqmLXlKw3djXwcoiHAIxHokyRODl3VR2

+wtkgYLBiPeYJJhJBjilavbtDPbD0L0OuE2W3D4M9XtrAh+WED/IhPSSrXZz22LC

i+aPi3HtV+PsHXHGss6nruKA2I14YvatJyKGgrunmnCDcj5QXxvFbPeuPQHbQRsg

20TuDmKeqAG4mIFXG3v3D5YurdDzO1ZWk+t1in4d7q+4KuBlTCNiksKJs+nxiE/7

J5fnLYwYNbnsUOkkqkbCG4QZmqoA5KTw2bFQJXUI8R5fbsnUppi/XuxshSO5CPzC

7eFrrU0mU1nmAXnfQuVsbyVQtoKnptMHlKzzK/n+CXtSUtyUVi7j7p6qF8Ml/KF4

XhEeILWaIwtFQGVIuD88B784Hhgq6i0bHAESKI21P7+KNU64DXJsP/2PAjKEKbVy

KplyKfcd4mSl4fiq971Wk+S7QVd3wg/1Bc5Gb/yEFSTLcgQGAzA=

=5jrL

-----END PGP SIGNATURE-----