A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Mail any security reports to this email-address
Contact: mailto:security@lugico.de

Expires: 2031-12-05T23:00:00.000Z

# My public PGP key. Please encrypt all emails regarding security issues using this key
Encryption: https://lugico.de/pgp-key.txt

# Security acknowledgments page
Acknowledgments: https://lugico.de/hall-of-fame.txt

Preferred-Languages: en, de

Canonical: https://lugico.de/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEERtkHoU2GhYmPqAknxVzSJmxOb9QFAmGybdAACgkQxVzSJmxO
b9Q8hBAAyQwF7Kzm47g3M4fNdQvfGRcV7lY6mX85jTuaRibc+9z9iWJjCq62QtDl
O4JD2zVn7LANNRaz1ifSt2aNCzUyABTmf7INA5D4RpDgOZLNzu7uGrelIi/IeJ4x
wYrIro38f2Bc17dkEO57lgsAChwffXJCS6Nh7qLeg0y2ADZhPQRZWLeg2thZmru1
HmJUycfk2SFEw5btA+Yvq7DmZ1FjjsVXrpx38pL769S3TaOJserbOXWJlGW/QCN+
jNVPuYD8j1awWIlGjKXVgwYuDFjMcdHrqVSNVldiZcqdT3nvJ8p5BM0UL6z0xo5B
yprV2vQ5Lsa9/iN7EDwW/NW6XCLMfshoaHeZNk6iQNLTYS0i7hptEzh+RpvFdgRo
4Luy2f7hqkMD05TS2Yqt1+WIIkPl6FZhJUNSQqteVk/e5ILjHf06In/JoR4uimQN
bMhgCJzL/8BBJKQRFmXkekjX99qV2GPNDYfazjwyTqzSvN6ax1ZMyIkrLLTBFOfO
njDO4NhO9NOeweKE2YYj6tVSM8JgdH766rO14mSdR+vH8jrzWdg7lADfN89IDJz1
GvXEzBGlBFTL22Nure7CAVPdns4S8ytsjLECv2+MOnvKlLmVWFrVyUOFJZVBjKrI
JBobUlIWT6MEYyaen4dp1yxriLrB3pn2fabeYO4TY4vOkyWxt0c=
=yz8e
-----END PGP SIGNATURE-----