A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Canonical URI
Canonical: https://www.bosch.com/.well-known/security.txt

# Contact
Contact: https://psirt.bosch.com/report-a-vulnerability/

# Our OpenPGP key
Encryption: https://psirt.bosch.com/media/pgp/psirt-at-bosch-dot-com.asc

# Encryption
Encryption: https://certsrv.bosch.com/

# Our security acknowledgments page
Acknowledgments: https://psirt.bosch.com/hall-of-fame/

# Our Preferred-Languages
Preferred-Languages: en, de

# Our security policy
Policy: https://psirt.bosch.com/bosch-responsible-disclosure-policy/

# Jobs at Bosch
Hiring: https://jobs.bosch.com/

# Expiry date
Expires: 2027-01-31T00:00:00.000Z
-----BEGIN PGP SIGNATURE-----
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=6Aux
-----END PGP SIGNATURE-----