A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: https://kumi.systems/kontakt/
Expires: 2022-12-31T22:59:00.000Z
Encryption: openpgp4fpr:A0809BF6AEDD49E68BC91F5DCDDEDBB4A6DF991B
Preferred-Languages: en, de
Canonical: https://kumi.systems/.well-known/security.txt
Policy: https://kumig.it/kumisystems/security-policy

-----BEGIN PGP SIGNATURE-----
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=HIo7
-----END PGP SIGNATURE-----