A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

# In case of security incidents please contact the
# Swisscom Computer Security Incident Response Team (CSIRT)
Contact: mailto:csirt@swisscom.com
Contact: https://www.first.org/members/teams/swisscom_csirt

# For vulnerability reports please contact the Swisscom Bug Bounty Team
Contact: mailto:bug.bounty@swisscom.com
Contact: https://www.swisscom.ch/en/about/security/bug-bounty.html
Policy: https://github.com/swisscom/bugbounty

# Open positions
Hiring: https://www.swisscom.ch/en/about/career/vacancies.html?f=20%3A1018327&p=1

Expires: 2024-12-31T23:59:59.000Z
Preferred-Languages: en, de, fr

# Canihazchallenge: aHR0cHM6Ly9naXRodWIuY29tL3N3aXNzY29tL3NlY3VyaXR5dHh0L2Jsb2IvbWFzdGVyL2NoYWxsZW5nZXMvMjAyNC5nYg==