A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Our canonical URI
Canonical: https://rku-it.de/.well-known/security.txt

# Our security adress
Contact: mailto:security@rku-it.de

# Our preferred languages
Preferred-Languages: de, en

Expires: 2026-02-20T00:00:00.00Z
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQTNn9uxwO7lV5M3uUEVmCKBKiGlTwUCZ7cBNgAKCRAVmCKBKiGl
T7DqAQDMA9HiA68Nq3+D7IOYh07LHv9yMZAplILWhI+lRy3QoAEAgKfV92XLhAgm
vGN7zUxK/e0sMrCknP1G2BG87cZoigg=
=9pPv
-----END PGP SIGNATURE-----