A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:ciso@heinlein-support.de
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/4BD9CBE5E4A7E5B8EDC6EB3E22FCF26B0AF35944
Preferred-Languages: de, en
Canonical: https://www.heinlein-support.de/.well-known/security.txt
Canonical: https://www.heinlein.group/.well-known/security.txt
Canonical: https://www.jpberlin.de/.well-known/security.txt
Canonical: https://mailbox.org/.well-known/security.txt
Canonical: https://opentalk.eu/.well-known/security.txt
Canonical: https://opencloud.eu/.well-known/security.txt
Hiring: https://heinlein-support.de/jobs
Expires: 14 Jan 2028 00:00:00 UT
-----BEGIN PGP SIGNATURE-----
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=rIYX
-----END PGP SIGNATURE-----