A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256





# Our security address

Contact: mailto:security@trumpf.com



# Expiration

Expires: 2027-01-01T04:59:00.000Z



# Our public key

Encryption: https://trumpf.com/pgp-key.txt



# Canonical URI

Canonical: https://trumpf.com/.well-known/security.txt



# Line requested by MS February '25

CSAF: https://trumpf.csaf-tp.certvde.com/.well-known/csaf/provider-metadata.json

-----BEGIN PGP SIGNATURE-----



iQIzBAEBCAAdFiEELq3FytThi7hAnDxtyZSTu5ixSKQFAmfImJUACgkQyZSTu5ix

SKRI7w/5AS5g6hSIEv3GMC/LgCySWc8/NtivXMKgHT/iEyUfR8/6EkvtCGusVMz2

tC0PwGWw8ABhyA7TglV/KmFH84yyxJaQFTxNJjpDTmrP2cnTiaIMhTrkar36ZyCr

THqm++q2L0SBe+QkHIR3c1UqUmazP3USjVFssBogG7bdIEmSjEQAgZrBDAH6Awxt

PCzTjghJyr68RQxUxl0Fz+/xUauqZm/lRZMu0gsj6Cw/zECqCTa0+FUscxX6PPkU

A8sIx8NmmkdLXr5rojrSzVWGJ/d6Dpa74Uhqq0j95DxQ6xC2+qbeyetvWPAFvx+o

ZfwncWaEnTWBulvhPKm66FRK1YWaVhO8PCShixRMrldDbr0CYmVs6h9XJnSDhktG

rWSDUwUI3oIJCTI0bNEBmoEMm5Hy5iMgrnWGiug/Y4lGKmXrn12lJ6DSGflsX2Jb

MqaddvSq42dKcnVEguPdlu0G/cXtXNk6PiAlbq10l7QndaE1WVyOst+nfttGdxtZ

eHcP11PG9ESo/xwgWI5WxaeGxv2V3R2l7x14IcsNAN1eH1x2nab9Kks15pcyDdY9

/b/MGPeUB11bEji0D+3BGPd+iU3kgONx8sYk1qYhfrk8rHPQSf76UuWj45HOkoft

G5d6th2hry9PHKCEKG/61vHTos16I2E6GNx09S/I/Y1va6PVJLw=

=PJCV

-----END PGP SIGNATURE-----