A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----




Hash: SHA512









Contact: https://www.atlassian.com/trust/security/report-a-vulnerability




Contact: mailto:security@atlassian.com




Expires: 2022-12-06T00:00:00.000Z




Encryption: https://security-static.prod.atl-paas.net/atlassian-security-public.asc




Preferred-Languages: en




Canonical: https://www.atlassian.com/.well-known/security.txt




Policy: https://www.atlassian.com/trust/security/report-a-vulnerability




Hiring: https://www.atlassian.com/company/careers/all-jobs?team=Security




-----BEGIN PGP SIGNATURE-----









iQJLBAEBCgA1FiEELDj8C8lOTzpbVRHjBln3vJPyrugFAmGyPPIXHHNlY3VyaXR5




QGF0bGFzc2lhbi5jb20ACgkQBln3vJPyrug5vw//Wyg5dY47dWNljM+RnAKkGli3




PxdR1zPTXjj0+id/ZR85c+qJ12ThZmkPQ0oEhDuCBY7Acm2kFOfzW4X9I//lvbTy




TxRZqTB687GjvBPZ5u/gMhHJkvPYZvUn3DgpUdxFsKTY0ipqJc2uwjiSkyIFDzbu




pOQA3L78mfQYmKghcnWf0mzkf0C8PY7gxPGpj84JRwWD28kJgE/7qj4LPB4Kt6L4




Xao/m8rue12RJyVhpv1CbCIf2sQBSNROOwEWel0rPbSa6zp2p7C9DR1rAOJeRGcl




ueMGq2Dkblx14YqJ5dhTxFl001GJawH80kbCM6mawFGe1vWBG/7BRm3sUtau3Mu2




CP5Y5D0VNIN6m2/f83K2HQQFUFxbrTOUSUiIqPPO7eGFSt+ttRRqcRbmk896MmBH




sxY4o4RemEY1PKTSgpnWfWQ/WQXjUqJV8KpDAsTkyQ50CPRDbqCSRzi9SVDAXuw9




qIxHuL2FAKQonyKnrJv2uBAZpvSIIk9eA17ip2O4o6HtgJtbyjSPMfXXh1lWvpfj




9GkGvyLzqB5YsjMLr91pbxaO+G+IAT6rfHuKMW6xU0acFkVBw8QGkQR/gfpIovZ0




3Q5IE2TBpz57sNK/fqxgSpqEPbAHgTrEuUYscJCurfE1dnnPLVbSzQl0TIE22VtU




arLqfJE+UVrjgWr/8Vo=




=e0rt




-----END PGP SIGNATURE-----