A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: https://hackerone.com/heymoney
Contact: mailto:security@heymoney.de
Contact: mailto:security@iconicfinance.io
Encryption: https://heymoney.de/gpg/security@heymoney.de.asc
Preferred-Languages: en, de
Canonical: https://heymoney.de/.well-known/security.txt
Policy: https://hackerone.com/heymoney
Hiring: https://heymoney.de/jobs/
-----BEGIN PGP SIGNATURE-----
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=PgGj
-----END PGP SIGNATURE-----