A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hash: SHA512

Canonical: https://www.elberet.de/.well-known/security.txt

Contact: mailto:security@elberet.de

Contact: matrix:u/jens:elberet.de

Encryption: https://www.elberet.de/security@elberet.de_0x62EE57EA_public.asc

Expires: 2029-10-10T23:52:08Z

Preferred-Languages: de, en
-----BEGIN PGP SIGNATURE-----

iIoEARYKADIWIQSBcHqGpFfwh308FrnWBe22Yu5X6gUCZwhSfhQcc2VjdXJpdHlA
ZWxiZXJldC5kZQAKCRDWBe22Yu5X6ouyAP9fWIye1EoZaVtBOkuImFYELH5ZNoaQ
561E+4AztU2M5gD/STqRMbWa8hrkRMgdepKM7qu0cePCaVclKog6z84N+wo=
=5Tap
-----END PGP SIGNATURE-----