A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Contact information
Contact: mailto:cert@uni-muenster.de
Encryption: openpgp4fpr:dafec35508f3cb672df7c3c276e41181c01d356e
Encryption: https://www.uni-muenster.de/CERT/encryption/pgp.asc
Encryption: https://www.uni-muenster.de/CERT/encryption/smime.pem
Preferred-Languages: de, en

# We appreciate the responsible disclosure of vulnerabilities related to our networks or systems
# Please note: We sadly cannot offer any bounties or rewards
Policy: https://www.uni-muenster.de/CERT/en/incidents/
Acknowledgments: https://www.uni-muenster.de/CERT/en/incidents/acknowledgments.html

Canonical: https://www.uni-muenster.de/CERT/security.txt
Canonical: https://www.uni-muenster.de/security.txt
Canonical: https://www.uni-muenster.de/.well-known/security.txt
Expires: 2026-12-31T22:59:00.000Z
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEE2v7DVQjzy2ct98PCduQRgcAdNW4FAmXUYXgACgkQduQRgcAd
NW4tVAgAmMj1QfG5noxlwXC0R3j92jdwo0gD02s4ZGdADxe+KuAqDGVDWsGMP05r
2JXJNXazbkseyipMUswehE29xmHSDVD1kzQw9vAeWCl8Nx1QPCJSPusE9CgWCs3F
friMV1CJd35gCgfVdgIhWzqAt4fpeqOukxVi/WY0MWyRyzjPQMjdhTBjnLSfQM0v
j7pyIJj8KaUIZRSX9/zApxkne/HD1dyANuI6UehEzMXAUeG6wvPD/vtUVM8q7pb5
/E6d8HnTvYMAxUB5kqHlBEItR5COtQKpJNU8JIwxDvkG2qku0j9vUOve0AhBw4sq
t2q0hzzI3pmQontjHrPEyOQYCeWpEg==
=dmm7
-----END PGP SIGNATURE-----