A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Our security address
Contact: mailto:security@verkkokauppa.com

# PGP Key (Fingerprint 6380 3939 DF5B D462 7B34  9D02 EF31 A249 6901 1BF8)
Encryption: https://www.verkkokauppa.com/assets/static/pgp-key.txt

# Alternatively we can use Office 365 Message Encryption.
# Just send a plain text email with no sensitive contents and request an encrypted reply.

# Please communicate in English or Finnish
Preferred-Languages: en, fi

# Canonical location of this document
Canonical: https://www.verkkokauppa.com/.well-known/security.txt

# This document becomes stale after
Expires: 2023-01-17T00:00:00.000Z
-----BEGIN PGP SIGNATURE-----
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=tdez
-----END PGP SIGNATURE-----