A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Canonical: https://itrelation.dk/.well-known/security.txt # General security concerns or findings, please contact Contact: mailto:security@itrelation.dk # Encrypted enquiries etc. in accordance with https://itrelation.dk/rfc2350.txt, please contact Contact: mailto:cdc-csirt@itrelation.dk # Our OpenPGP key Encryption: https://itrelation.dk/pgp-cdc-csirt.asc Preferred-Languages: en Expires: 2023-12-15T12:00:00.000Z -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQTYqf9c6SMa7U7HPKy2XIxA1N1ZlQUCY1FCzgAKCRC2XIxA1N1Z lQraAP9p+2bWmY0rDYvV1a01SLUysFZpVDwDKN6dMAP2Z/veJAEAlHyqZ3Mogxpm DXGH49fzpyL2KfBwL4jC/scnXEElvwQ= =NwG2 -----END PGP SIGNATURE-----
This policy crawled by Onyphe on the 2022-02-05 is sorted as securitytxt.
FireBounty © 2015-2025