A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@univention.de
Expires: 2025-10-01T07:00:00.000Z
Encryption: openpgp4fpr:9858ED38DF0078C01F092E512A5E8D1842C305FF
Preferred-Languages: en, de
Canonical: https://www.univention.com/.well-known/security.txt
Canonical: https://www.univention.de/.well-known/security.txt
Policy: https://www.univention.com/security-policy/
Policy: https://www.univention.de/univention-security-policy/
Hiring: https://www.univention.com/about-us/careers/vacancies/
Hiring: https://www.univention.de/ueber-uns/karriere/stellenangebote/
-----BEGIN PGP SIGNATURE-----
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=AmNR
-----END PGP SIGNATURE-----