A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@hinweisgeber-meldeportal.de
Expires: 2025-12-31T00:00:00.000Z
Encryption: https://hinweisgeber-meldeportal.de/.well-known/pubkey-8CA9C62B.asc
Preferred-Languages: de, en
Canonical: https://hinweisgeber-meldeportal.de/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=JCnN
-----END PGP SIGNATURE-----