A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@safeserver.de
Expires: 2025-02-28T22:59:00.000Z
Encryption: https://static.safeserver.de/security/security-safeserver.pub.asc
Acknowledgments: https://static.safeserver.de/security/thankyou.html
Preferred-Languages: en,de
Policy: https://static.safeserver.de/security/security-issue-reporting.html
-----BEGIN PGP SIGNATURE-----
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=jIWo
-----END PGP SIGNATURE-----