A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:email@joestr.at
Expires: 2025-07-01T00:00:00.000Z
Encryption: https://www.joestr.at/assets/joestr.at_0xd5bc2b44_public.asc
Preferred-Languages: en, de
Canonical: https://www.joestr.at/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=7mgw
-----END PGP SIGNATURE-----