A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:hostmaster@ekomi.de
Expires: 2025-12-31T22:59:00.000Z
Encryption: https://www.ekomi.de/.well-known/pgp-key.txt
Encryption: https://keybase.io/ekomi/pgp_keys.asc
Preferred-Languages: en, de
Canonical: https://www.ekomi.de/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQFIBAEBCgAyFiEEfc5ndZOaMoXPb3gFbhxlBUX/ldwFAmFL86sUHGhvc3RtYXN0
ZXJAZWtvbWkuZGUACgkQbhxlBUX/ldynCQf+OoKh900t+tN8O9720o5s/reUwpbo
uYdm37rGIOmjf4IyZZbjWdYQs1sRHbs4NEah/z6MfXcO1JxNt+EiHDmPhL1gw2q/
O3eYqthQi1vQDRiPMd9LcUrfye/RT7Xs4A7FtdPtdN5hiE/A9yRJvC1HpybjvoP1
+aHiYyLlekRIcZvO7EECDpq/jYE+iiMesDs8nYWVtaHe9bTjn2Dgg1uenf96gHMa
mIJSXWQO2Doj7+F2+IbXSw3PLO9HgmX9LvUE7QmAkiAxlRU5V+XX80m7i/PuqZxk
kRdYKwVwsaiTCPNsH3xzQKBoW9dqb/qIFm+MAuf8n47+DSjRUQVdG5nBkw==
=op7/
-----END PGP SIGNATURE-----