A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: https://www.atlassian.com/trust/security/report-a-vulnerability
Contact: mailto:security@atlassian.com
Expires: 2022-12-06T00:00:00.000Z
Encryption: https://security-static.prod.atl-paas.net/atlassian-security-public.asc
Preferred-Languages: en
Canonical: https://www.atlassian.com/.well-known/security.txt
Policy: https://www.atlassian.com/trust/security/report-a-vulnerability
Hiring: https://www.atlassian.com/company/careers/all-jobs?team=Security
-----BEGIN PGP SIGNATURE-----
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=e0rt
-----END PGP SIGNATURE-----