A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://www.deepl.com/.well-known/security.txt
Contact: mailto:security@deepl.com
Encryption: https://www.deepl.com/gpg/security-at-deepl-pubkey.txt
Preferred-Languages: en
Policy: https://dee.pl/vuln-policy
Expires: 2026-12-01T09:00:00.000Z


-----BEGIN PGP SIGNATURE-----
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=TQ+M
-----END PGP SIGNATURE-----