A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Our security address
Contact: mailto:abuse@cuni.cz
Contact: https://csirt.cuni.cz/en/contact

# Our OpenPGP key
Encryption: https://csirt.cuni.cz/en/publickey.asc
Encryption: https://keys.openpgp.org/search?q=3F76F3C999DA105979005B4C2FC53DCB10AA8BE1

# Our security policy
Policy: https://csirt.cuni.cz/en/incident_reporting

# Out security acknowledgments page
Acknowledgments: https://csirt.cuni.cz/en/acknowledgements

Expires: 2025-02-28T18:00:00Z

-----BEGIN PGP SIGNATURE-----

iQFCBAEBCAAsFiEEP3bzyZnaEFl5AFtML8U9yxCqi+EFAmXoKCMOHGFidXNlQGN1
bmkuY3oACgkQL8U9yxCqi+GnoggAlJopUWWpbeVjuyhRVMqg3k9FTcMzKgAKcknK
tiT6XbNWH8/NxsagDWg+2YTpwR5BI+hOT7y1iMg9zhYYTN2c7nrdifW0zyq22z2T
mADPmM3FbiOnvO0AgzvX/M/Dx8YAPYS1q09AnLQRtax9erw53gOSqtC1lCdyoJmL
Z37k66lueB1EceA6t53uN9FtaJrGqywOr7fUO9qCzeYX42xrwKxqiC6pyvL3KD8Y
2fnXMGXRGzZeucco9kZcogaLSStAPlln5krWtHAuxiVcc3568VONUpn3Uj0eos3o
2U8HT2jS6kRUFGxMqPcG5Z0EGVslMY76skdInYe7OM2/zJPEKQ==
=/1ZC
-----END PGP SIGNATURE-----