A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.
# Our security address Contact: mailto:psirt@claas.com # Our OpenPGP key Encryption: https://www.claas.com/caas/v1/media/62972/data/8674fdf4302d125256c2742b538246c3 Canonical: https://claas.com/.well-known/security.txt # Our preferred languages Preferred-Languages: en, de # Our CSAF (Common Security Advisory Framework) provider CSAF: https://claas.csaf-tp.certvde.com/.well-known/csaf/provider-metadata.json Expires: 2026-11-14T14:00:00.000Z
This policy crawled by Onyphe on the 2025-04-02 is sorted as securitytxt.
FireBounty © 2015-2025