A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@heinlein-support.de
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/C0D107A484CAFE6D9F8DA2A8478AEED092060A79
Preferred-Languages: de, en
Canonical: https://www.heinlein-support.de/.well-known/security.txt
Canonical: https://www.jpberlin.de/.well-known/security.txt
Canonical: https://mailbox.org/.well-known/security.txt
Hiring: https://heinlein-support.de/jobs
Expires: 31 Oct 2022 00:00:00 UT
-----BEGIN PGP SIGNATURE-----
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=MMZ7
-----END PGP SIGNATURE-----