A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA512



Contact: mailto:product.security@adtran.com

Policy: https://www.adtran.com/en/about-us/support/product-security

Canonical: https://www.adtran.com/.well-known/security.txt

Encryption: https://www.adtran.com/-/media/adtran/resources/asc/support/product-security-office-0x-461bffd-9-public.asc

Expires: 2026-05-01T00:00:00.000Z

-----BEGIN PGP SIGNATURE-----



iHUEARYKAB0WIQTczi3WdCMtxWY9/n5fcS+2Rhv/2QUCaBxV+gAKCRBfcS+2Rhv/

2S2jAQDsCMYI/TQL1kcUL1cFUykqG5khVXVS0JBXQSoOkZaNwAD/QrXg+iZb1Kz6

ee0q3DLlqe76qQLzgxpIVXThFLKiZwI=

=mEti

-----END PGP SIGNATURE-----