A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:it-security@pixum.com
Expires: 2026-04-01T10:00:00.000Z
Encryption: https://pixum.com/.well-known/security/pgp-keys.txt
Preferred-Languages: de, en
Canonical: https://pixum.com/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----
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=NO03
-----END PGP SIGNATURE-----