A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----









































































Hash: SHA256



















































































































































# Canonical URI









































































Canonical: https://www.catawiki.com/.well-known/security.txt



















































































































































# Our security address









































































Contact: mailto:security@catawiki.com



















































































































































# Our OpenPGP key









































































Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/5647963D3100AA8CB88A262AF8F98E8B2D29F2F5



















































































































































# Our security policy









































































Policy: https://www.catawiki.com/en/help/buyer-terms/responsible-disclosure-statement



















































































































































# Our open security-related jobs









































































Hiring: https://catawiki.careers/vacancies









































































-----BEGIN PGP SIGNATURE-----



















































































































































iQIzBAEBCAAdFiEEVkeWPTEAqoy4iiYq+PmOiy0p8vUFAmPZGUUACgkQ+PmOiy0p









































































8vVhLQ/9H2iO4LaurSTrc4epFy4n3qthn4WAy6li7Q3KgcXmHLb/cGAIhw12+HjT









































































bviYcqbuPefUlhzI4nGvPSpGkbhUYnM3EZ9jXoBBKbefYeTT9pFnXBjHYJo6oSko









































































AJ+KL0pGfAKP/GGleOj4AdAUrSk1eMI0YfsuqVZjE4E3Ce3zvA/yXH+i5hNna9Fo









































































xjjCLmikI2P7OB35Yf246a9MpUzCg5N40nS6DVIRP1FmJEfUMVPzepF5Bvzu4Hb4









































































o6czoY8Js0O/102hbtB9BefbOFDnpbWvNGOTI6Hduwjvf7Tc2n4tgkk7aSt7TZ92









































































7jWdkQamMHm2H36RSOB2asNUeA6sIMZBsvHHIqkAlD4KyMsaxHuxg1Tw3gbDZtVn









































































ITyVSDvksGv16rACjRu90CW16MZZ+CQ2qzEexLhKWy/AOe1aHWYV2EwOGbL51EUN









































































rZd/MdddAgBaPTQ7TAERl8J0t68Wx0HdNuKFSTKETL6FB4J3vTOLlf5QzKHAnyej









































































Z7wHG7AcwkgBUGUzX841et4KvWiYVTk4G9Jw/zZaVulBM/0KOk0pdUJgFqMl95Ga









































































SmOrQzxuLZ+AMv5Fr46qiHtJr4FkTIbPduAbQiF/vOU9sWeloB3k3u/zcjkwYlgZ









































































s76ySmHrPDS9/FETj4WVuPL0hJIvJmkDCS/ZnRl8zuon3HyAb6o=









































































=oHt+









































































-----END PGP SIGNATURE-----