A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: https://www.atlassian.com/trust/security/report-a-vulnerability
Contact: mailto:security@atlassian.com
Expires: 2026-01-31T00:00:00.000Z
Encryption: https://security-static.prod.atl-paas.net/atlassian-security-public.asc
Preferred-Languages: en
Canonical: https://www.atlassian.com/.well-known/security.txt
Policy: https://www.atlassian.com/trust/security/report-a-vulnerability
Hiring: https://www.atlassian.com/company/careers/all-jobs?team=Security
-----BEGIN PGP SIGNATURE-----
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=fHvh
-----END PGP SIGNATURE-----