A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA512



Contact: mailto:security@franke.com

Expires: 2030-02-01T00:00:00.000Z

Encryption: https://franke.com/security/pgp-key.asc

Preferred-Languages: en, de

Canonical: https://franke.com/.well-known/security.txt

Policy: https://franke.com/security/vulnerabilities_disclosure.pdf

-----BEGIN PGP SIGNATURE-----



iHUEARYKAB0WIQSG+hZHVgB/yN1UwlS3Ba8TDdl73wUCZ4+PcAAKCRC3Ba8TDdl7

32seAP0Ys1N/lOarXvfIZ6bSqknyiT+0lwoSlMldHHLehQfEeQEAgXSCB8uq4hdj

20N4iRLrU8nnEfjBkCpJMxvFQCiHgwo=

=lxIq

-----END PGP SIGNATURE-----