A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Our security address
Contact: mailto:sec.contact@xandersoft.com

# Our OpenPGP key
Encryption: https://xandersoft.com/sec.pgp-key.txt
Encryption: openpgp4fpr: B78762404858F94F4EA6B7FA7D87AFD2188F349C

# Our security policy
Policy: https://xandersoft.com/security-policy.html

# Our security acknowledgments page
Acknowledgments: https://xandersoft.com/hall-of-fame.html

# Our preferred languages when submitting security reports
Preferred-Languages: de, en

Expires: 2025-12-31T23:00:00z
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEt4diQEhY+U9Oprf6fYev0hiPNJwFAmd3G38ACgkQfYev0hiP
NJx4Zg//VIktXh8AHSRq1o/M5sM2O/vi7JB8o4uhbeSxKreREEIZVwlpI1voL+GF
xbbr67/ODbyw0eNPcCnF/CfgXGOYK66TM5ocrCnY0x9ejWIIpTCyvdy9eJKbPzvJ
BRy+BVCI3aFaUOwY4evFZgIQkla1RGt4hIaF40OxhDykiFeS6d1HFyt28nwtyp66
SbFicLXzoE/xxkqBLeNfC0gQu9DwVHlz0PcfhcNGqhFTbS0oNcM1EQ02WLW0PY2c
p3iXJ/PzFc94dvc8y4HK+FdtoUJ9izac2mjBKa+4bqmiELeXjx1Qt+bcsN4wFrI6
tUntC+uRp1cbVKn7oDdMHSoIp0lfRIUZ0p/ivfzYtqwGw50JglwMHQrbcmn8AhbL
s9H5JaF1wOYqO0NKrM0NIAqpSVkXvHhrRMGZhCJHnwTx7RqbZ7ayYo9NtWNN31Ws
u/eAdBau0ZvXFNKUMR6zKnx4rvvQA1xsZI96NRgbl6r9LYa0ftF/rlooT8MkeHXj
OjTZ732fo5Z0zSiPD/eXt3ONHcpbD0qfLdnMmVoXVBN29nFvHS4pw3edMZzezICD
A8VSzSwN33UeRmrj/UMSIo4W1tzDs5YXtrv7Rq8pxLf0sC+GlBERKqFps2MAFFLr
Ph2TuEg3QAc80DoRjbDUnC5dpNaIJfQvVkHY1xdgke7VmEOwF+E=
=hl4E
-----END PGP SIGNATURE-----