A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://www.deepl.com/.well-known/security.txt
Contact: mailto:security@deepl.com
Encryption: https://www.deepl.com/gpg/security-at-deepl-pubkey.txt
Preferred-Languages: en
Expires: 2025-12-01T09:00:00.000Z
-----BEGIN PGP SIGNATURE-----
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=FTJI
-----END PGP SIGNATURE-----