A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:csirt@wisetechglobal.com
Expires: 2025-07-08T16:10:38z
Encryption: openpgp4fpr:EA9349E0DE158611E0B695DAF73390698A1425FE
Preferred-Languages: en
Canonical: https://www.xware.se/.well-known/security.txt
Hiring: https://www.wisetechglobal.com/careers/current-openings/
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQTqk0ng3hWGEeC2ldr3M5BpihQl/gUCZ3wAgwAKCRD3M5BpihQl
/nC0AP48GCbRwL1rqbRFlRMn0vcbwzdhIc8qHZHkeEZ+g20zcgEAhGj82FZI4rhj
hdGlBmFVVSrj1ojCLy+zKpuprx5usgo=
=QgHF
-----END PGP SIGNATURE-----