A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

# security.txt para IPLeiria
# https://ipleiria.pt/.well-known/security.txt
# Conforme RFC 9116

Contact: mailto:csirt@ipleiria.pt
Contact: https://www.ipleiria.pt/csirt-ipleiria
Encryption: https://www.ipleiria.pt/wp-content/uploads/2024/10/csirt_pki_pub.asc
Acknowledgments: https://www.ipleiria.pt/viver/servicos/servicos-digitais/csirt-ipleiria/rfc2350-csirt/
Policy: https://csirt.ipleiria.pt/politica-divulgacao
Hiring: https://www.ipleiria.pt/politecnico/servico_gestao_pessoas/concursos-e-contratos/
Preferred-Languages: pt, en
Canonical: https://ipleiria.pt/.well-known/security.txt
Expires: 2026-12-31T23:59:00Z