A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@demv.de
Preferred-Languages: de, en
Policy: https://www.demv.de/responsible-disclosure
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/A5123FB3DD234D6BBE93F3D3A5210CDBAE187CE7
Canonical: https://www.demv.de/.well-known/security.txt
Canonical: https://www.demv-systems.de/.well-known/security.txt
Canonical: https://www.professional.works/.well-known/security.txt
Expires: 2025-06-04T13:37:00.000Z 
-----BEGIN PGP SIGNATURE-----
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=zsaE
-----END PGP SIGNATURE-----