A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:cert@polisen.se
Expires: 2026-01-30T23:00:00.000Z
Encryption: https://polisen.se/pgp-key.txt
Preferred-Languages: sv, en
Canonical: https://polisen.se/.well-known/security.txt
Hiring: https://polisen.se/jobb-och-utbildning/lediga-jobb/?lpfm.cat=476
-----BEGIN PGP SIGNATURE-----

iQGzBAEBCAAdFiEECte1Fz3SJGewHYAooSwdhhUFSxkFAmeFAa0ACgkQoSwdhhUF
Sxnt0wwAjCvC3pHNyj2aPm+ZXDefNsioE5YULyVCvj8dPu2zoDAAdfnzY/EVklfY
ZJTC8m23SxotJ/iwFQnvWUnoaPM3Uj8aDYknMJH0GwKY9IWgeSyc0DaBI4NLdNXt
xebT7mI5NhKOIo3DY7FRqmYUtGBBzVXf7NNa9VjbK1pvLOf03z6lZUuO3BV4odcb
dmNe2dx8vMTdOXK+dOb4tb1h7RfFaAWBmN4gCoAS1h30l3CotMeHHP1INUfD6iaM
FTKrzVqzSF1vpHUyV8u9GcVMbRsmCy2J5isg04o4FPz49d+Y9hcA0awW/dxa1r5x
ZAeUqiXOT2dHjz6B6XvxWfSrYIlLfAPOChHLJ10GrV12lJS5nHELejF1Id4+9if/
Zu6W/YLgq2UUhPGG2+DaOVkI0jHPOEYlEX+Hzg5aqyyI7tSuv0D7xyPOuNjw2ZS/
v8RQ9WGJGAkJA6GvbmK8FrOIV2/O/7Pz1nXclwMmxnI4LrZHKUnap/SHRrvtPZRT
WRProvag
=VpHI
-----END PGP SIGNATURE-----