A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://luzat.com/.well-known/security.txt
Contact: mailto:thomas@luzat.com
Encryption: openpgp4fpr:8B511512268FDB7E159636B85AB76BDE174974E4
Expires: 2023-12-31T23:00:00Z
Preferred-Languages: de, en

-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQSeMrhcgvmxeeTnjBv/ra4NMdEdKQUCYpPjRgAKCRD/ra4NMdEd
KR78AQCDW80rdI4o9jOmTXeT8LvUdEp1/hCFqNIeCghj7e6YVQD/a+Q6dJckLDwt
mNSEbvUNOq9sZsREEz/jOr/DWx0nEQY=
=POWw
-----END PGP SIGNATURE-----