A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA384



# Based on RFC9116
Canonical: https://ondeso.com/.well-known/security.txt
Contact: mailto:Vulnerability@ondeso.com
Contact: https://ondeso.com/vulnerability-disclosure-policy#contact
Encryption: https://ondeso.com/.well-known/Vulnerability_public.asc
Expires: 2026-01-31T18:00:00.000Z
Hiring: https://www.ondeso.com/en/company/career/jobs-with-ondeso/
Policy: https://ondeso.com/vulnerability-disclosure-policy#policy
Preferred-Languages: en, de

-----BEGIN PGP SIGNATURE-----



iI8EAREJADcWIQQBWWqXIRPEFhlCZxnc+Ks+nZy6LAUCZ5n6dhkcdnVsbmVyYWJp

bGl0eUBvbmRlc28uY29tAAoJENz4qz6dnLosEvsA/3oPOr4vZnxGB+6Y/RUoG+5B

UqDGGQ6eXPWXXCjxeorUAP93ZYaYKTYxUgNobXYUWzyuKdUyOmb/W+N9qlgAFdGu

Pw==

=GzG/

-----END PGP SIGNATURE-----