A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Our canonical URI
Canonical: https://www.continental.com/.well-known/security.txt

# Our central cybersecurity contact
Contact: mailto:csirt@continental.com

# OpenPGP Key for csirt@continental.com
Encryption: https://www.continental.com/.well-known/pgpkey-continental.txt

# Our preferred languages
Preferred-Languages: en, de

Expires: 2026-09-25T12:00:00.000Z
-----BEGIN PGP SIGNATURE-----
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=yxkj
-----END PGP SIGNATURE-----