A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



Contact: mailto:security@univention.de

Expires: 2029-01-06T07:00:00.000Z

Encryption: openpgp4fpr:9858ED38DF0078C01F092E512A5E8D1842C305FF

Preferred-Languages: en, de

Canonical: https://www.univention.com/.well-known/security.txt

Canonical: https://www.univention.de/.well-known/security.txt

Policy: https://www.univention.com/security-policy/

Policy: https://www.univention.de/univention-security-policy/

Hiring: https://www.univention.com/about-us/careers/vacancies/

Hiring: https://www.univention.de/ueber-uns/karriere/stellenangebote/

-----BEGIN PGP SIGNATURE-----



iQGzBAEBCAAdFiEEmFjtON8AeMAfCS5RKl6NGELDBf8FAmllCLIACgkQKl6NGELD

Bf9SVwv9H1xUktkDH1ywaN+XHK5jUG8WgdJ0QjcV239vSSHgVPjmQbtvcS3jmq/8

3UcVD2aF4X/zKgjQpmBhcyiwxRVxBBtmtHJDfQxU4rOhN8T2pkFOf2+NYgqMl2IO

vnnF7W04KKSdQTDeogLHsnQMmWw7CoDmYp53ltR0lFVJywipNsS3AOK7svhIZyfI

7NcW39XF83Ty0gTlcU93UMVXQXwCntei76gubmQh2G4AsuB+K6vVPLPikkZoLPg9

T0RtYLerIhkjR9tf0Mb4UdMU9/wznSER1rD/PzYbJN3N9Yg29m7WgU1t3cuLtjWI

GJLTWYiqQZyxKMvS0mw6wun0HR1/lZQf812UWt+MYeIMJQ51hMRcEL73hn/AuJjs

AiQ4upgAl9Vk4OHgDBNjG4ok/Q0wgZWMEOYN81BA408Tb9RbQHh16ywJBFjdI2YW

/ZZN9rIBct8DbacXssGZNbjiunKwA8jpoTJ9DVTcPIH8oGytDkG5WOzMWrpn7FCm

2gVdlCYF

=BFeW

-----END PGP SIGNATURE-----