A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:csirt@outsystems.com
Contact: https://www.outsystems.com/compliance/csirt/

Preferred-Languages: en, pt

Encryption: https://www.outsystems.com/-/media/files/generic/trust/csirt-pgp-signed-keys/publickey.txt?la=en&hash=E907B3308BD76E9D1BA390D4D9F15501965CEC3A
Canonical: https://outsystems.com/.well-known/security.txt

Policy: https://success.outsystems.com/Support/Security/Vulnerabilities
Policy: https://outsystems.com/security/report-a-vulnerability

Expires: Sun, 24 Oct 2021 00:01 +0000
-----BEGIN PGP SIGNATURE-----
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=AHvg
-----END PGP SIGNATURE-----