A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----





Hash: SHA512











Contact: https://www.atlassian.com/trust/security/report-a-vulnerability





Contact: mailto:security@atlassian.com





Expires: 2022-12-06T00:00:00.000Z





Encryption: https://security-static.prod.atl-paas.net/atlassian-security-public.asc





Preferred-Languages: en





Canonical: https://www.atlassian.com/.well-known/security.txt





Policy: https://www.atlassian.com/trust/security/report-a-vulnerability





Hiring: https://www.atlassian.com/company/careers/all-jobs?team=Security





-----BEGIN PGP SIGNATURE-----











iQJLBAEBCgA1FiEELDj8C8lOTzpbVRHjBln3vJPyrugFAmGyPPIXHHNlY3VyaXR5





QGF0bGFzc2lhbi5jb20ACgkQBln3vJPyrug5vw//Wyg5dY47dWNljM+RnAKkGli3





PxdR1zPTXjj0+id/ZR85c+qJ12ThZmkPQ0oEhDuCBY7Acm2kFOfzW4X9I//lvbTy





TxRZqTB687GjvBPZ5u/gMhHJkvPYZvUn3DgpUdxFsKTY0ipqJc2uwjiSkyIFDzbu





pOQA3L78mfQYmKghcnWf0mzkf0C8PY7gxPGpj84JRwWD28kJgE/7qj4LPB4Kt6L4





Xao/m8rue12RJyVhpv1CbCIf2sQBSNROOwEWel0rPbSa6zp2p7C9DR1rAOJeRGcl





ueMGq2Dkblx14YqJ5dhTxFl001GJawH80kbCM6mawFGe1vWBG/7BRm3sUtau3Mu2





CP5Y5D0VNIN6m2/f83K2HQQFUFxbrTOUSUiIqPPO7eGFSt+ttRRqcRbmk896MmBH





sxY4o4RemEY1PKTSgpnWfWQ/WQXjUqJV8KpDAsTkyQ50CPRDbqCSRzi9SVDAXuw9





qIxHuL2FAKQonyKnrJv2uBAZpvSIIk9eA17ip2O4o6HtgJtbyjSPMfXXh1lWvpfj





9GkGvyLzqB5YsjMLr91pbxaO+G+IAT6rfHuKMW6xU0acFkVBw8QGkQR/gfpIovZ0





3Q5IE2TBpz57sNK/fqxgSpqEPbAHgTrEuUYscJCurfE1dnnPLVbSzQl0TIE22VtU





arLqfJE+UVrjgWr/8Vo=





=e0rt





-----END PGP SIGNATURE-----