A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@heinlein-support.de
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/C0D107A484CAFE6D9F8DA2A8478AEED092060A79
Preferred-Languages: de, en
Canonical: https://www.heinlein-support.de/.well-known/security.txt
Canonical: https://www.jpberlin.de/.well-known/security.txt
Canonical: https://mailbox.org/.well-known/security.txt
Hiring: https://heinlein-support.de/jobs
Expires: 31 Oct 2021 00:00:00 UT
-----BEGIN PGP SIGNATURE-----
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=eM3x
-----END PGP SIGNATURE-----