A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:csirt@staatsdruckerei.at
Expires: 2035-12-31T22:59:00.000Z
Encryption: https://www.staatsdruckerei.at/pubkeys/pgp/csirt.pub
Acknowledgments: https://www.staatsdruckerei.at/responsible-vulnerability/
Preferred-Languages: de, en
Canonical: https://www.staatsdruckerei.at/.well-known/security.txt
Policy: https://www.staatsdruckerei.at/responsible-vulnerability/

-----BEGIN PGP SIGNATURE-----
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=2r/G
-----END PGP SIGNATURE-----