A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Canonical URI
Canonical: https://ndaal.eu/.well-known/security.txt

# Our security address
Contact: mailto:security@ndaal.eu
Contact: tel:+49-221-650-86-201

Expires: 2026-05-09T13:27:00z

# Our OpenPGP key
OpenPGP key: D1DE14AA6D1980BD3FB67BF5C706DFBCAC5EFA64

# Our preferred languages
Preferred-Languages: en, de

-----BEGIN PGP SIGNATURE-----
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=7QMG
-----END PGP SIGNATURE-----