A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

# If you would like to report a security issue, please use the instructions from this file.



# Our security address

Contact: mailto:security@iosub.ro



# The date and time when the content of the security.txt file should be considered stale (so security researchers should then not trust it)

Expires: 2027-12-31T21:59:00.000Z



# The key which security researchers should use to securely talk to us

Encryption: https://www.cybershield.org/pgp-key.txt



# The web page where you we thank you to security researchers who have helped us

Acknowledgments: https://www.cybershield.org/hall-of-fame



# Languages spoken by our security team

Preferred-Languages: en, ro, it, hu



# The URLs for accessing our security.txt file

Canonical: https://www.iosub.ro/.well-known/security.txt



# The policy detailing what security researchers should do when searching for or reporting security issues

Policy: https://www.cybershield.org/en/security-policy



# Security-related job openings in our organisation

Hiring: https://www.cybershield.org/en/member-of-the-cyber-security-education-association