A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@bikecitizens.net
Expires: 2025-01-01T00:00:00.000Z
Encryption: https://www.bikecitizens.net/security@bikecitizens.net-0x7E40492329BFDE9B-pub.asc
Preferred-Languages: en,de
Canonical: https://www.bikecitizens.net/.well-known/security.txt
Canonical: https://bikecitizens.net/.well-known/security.txt
Canonical: https://www.bikecitizens.net/security.txt
Canonical: https://bikecitizens.net/security.txt
Hiring: https://www.bikecitizens.net/aboutus/jobs/
-----BEGIN PGP SIGNATURE-----
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=C48I
-----END PGP SIGNATURE-----