A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



Contact: mailto:csirt@skatteetaten.no

Expires: 2028-01-31T00:00:00.000Z

Preferred-Languages: no, en

Encryption: https://www.skatteetaten.no/.well-known/pgp_public_key.txt

Canonical: https://www.skatteetaten.no/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----



iQGzBAEBCAAdFiEEcrpvRG8XOa6f9rQXK/d5f23IZVEFAmkNzXYACgkQK/d5f23I

ZVGQ0gv/cUbe3DG8lhZoeD9JgllWInwmiAeVsASaOyY3atLljsx5zDF8Nqntzie/

3Qk2Dc4/uj5ra2SiSKTArQgRBRewmae+IqKHZQ+VaaBmmowPkKbPRxuwKML5r6Xd

uX92MReF32R7jAdoQKUe1VhmZzNMrH1xdqdnp9pL7pakFlhMx38RmHmO0a8cOU+5

O4YNqeFyqHTnu8cJMlsMbHLygNk85CZwMBN5Z0zG1BPH3G+n/S8KSip1ucIfscp3

dxwbF3bPTH7ZnEvSKkYrULdBsaKynNNXjm+/bChO+JikD+bm0eMSs/VSZGTl12+Q

TQ4cFzMrwNn0dmSdlzR7w2pbbyC6T0mUGYMde8ua07jf+cEnclS2ln51EYsGJe/C

c0ibLe0yUT1JWKWn2nZfHieqv8e/sFlTAo69uTpP+EqQfX7/6ix1atlX6tizVIjL

FAfxm42pykI6GM3yUA7yji854vdxAjNRcakKE/r2OPqmQh5zM9O4D+1LLCBBL1y4

rmp4cve7

=M/4c

-----END PGP SIGNATURE-----