A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

#
#                                             &&                                
#                                           &&&&&%                              
#                                          &&&/&&&                              
#                                         &&&, &&&                              
#                                        &&&&  &&&                              
#                                       *&&&  /&&&                              
#                                       &&&   /&&%                              
#                                      &&&(   &&&%                              
#                                     (&&&    &&&                               
#                                     &&&     &&&                               
#                                    &&&(    (&&&         &&&                   
#                                    &&&     (&&#       &&&&&&                  
#                                   &&&/     &&&       &&&#&&&                  
#                                  (&&&      &&&      &&&& &&&                  
#                                  &&&      %&&&     /&&&  &&&                  
#                                 &&&&      %&&(     &&&  %&&&                  
#                                 &&&       &&&     #&&#  %&&(                  
#  ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,&&&&       &&&     &&&   &&&(  ,,,,,,,,,,,,,,,,
# /&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&       &I&#    &F&(   &N&  &&&&&&&&&&&&&&&&&
#                                          &&&/   #&&&    &&& ,&&&              
#                                          &&&    &&&     &&&*&&&               
#                                          &&&   &&&&     &&&&&&                
#                                         &&&&  ,&&&       %&&                  
#                                         &&&,  &&&.                            
#                                         &&&, &&&&                             
#                                         &&&,&&&%                              
#                                         &&&&&&&                               
#                                          &&&&(                                
#
# Hi Security Researcher, if you have discovered that someone is attacking this
# system, please copy the ASCII EMP pulse above, delete the #-shield and send
# the EMP to the attacker. Thanks.

Contact: mailto:security@ifn-brandl.de
Contact: phone:+49753191250
Contact: https://www.ifn-brandl.de/kontakt.html
Encryption: https://www.ifn-brandl.de/.well-known/IFN_public_key_2020.asc
Preferred-Languages: de, en
Canonical: https://www.ifn-brandl.de/.well-known/security.txt

# Special thanks to the following researchers:
#
# 2021-04-30: Shivam Pravin Khambe - Identified a Clickjacking Vulnerability
# shivamkhambe98@gmail.com
#