A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# If you would like to report a security issue
# you may report it to us here
Contact: mailto:security@coding4.coffee

# Our OpenPGP key
Encryption: https://coding4.coffee/security-key.txt

# Please write either in English or German
Preferred-Languages: en, de

Canonical: https://coding4.coffee/.well-known/security.txt
Expires: 2026-01-31T00:00:00.000Z
-----BEGIN PGP SIGNATURE-----
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=smm+
-----END PGP SIGNATURE-----