A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@tblflip.de
Expires: 2024-12-31T23:00:00.000Z
Encryption: https://tblflip.de/.well-known/openpgpkey/hu/t5s8ztdbon8yzntexy6oz5y48etqsnbb
Preferred-Languages: de, en
Canonical: https://tblflip.de/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=z/+M
-----END PGP SIGNATURE-----