A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----








































































Hash: SHA256

















































































































































# Canonical URI








































































Canonical: https://www.catawiki.com/.well-known/security.txt

















































































































































# Our security address








































































Contact: mailto:security@catawiki.com

















































































































































# Our OpenPGP key








































































Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/5647963D3100AA8CB88A262AF8F98E8B2D29F2F5

















































































































































# Our security policy








































































Policy: https://www.catawiki.com/en/help/buyer-terms/responsible-disclosure-statement

















































































































































# Our open security-related jobs








































































Hiring: https://catawiki.careers/vacancies








































































-----BEGIN PGP SIGNATURE-----

















































































































































iQIzBAEBCAAdFiEEVkeWPTEAqoy4iiYq+PmOiy0p8vUFAmPZGUUACgkQ+PmOiy0p








































































8vVhLQ/9H2iO4LaurSTrc4epFy4n3qthn4WAy6li7Q3KgcXmHLb/cGAIhw12+HjT








































































bviYcqbuPefUlhzI4nGvPSpGkbhUYnM3EZ9jXoBBKbefYeTT9pFnXBjHYJo6oSko








































































AJ+KL0pGfAKP/GGleOj4AdAUrSk1eMI0YfsuqVZjE4E3Ce3zvA/yXH+i5hNna9Fo








































































xjjCLmikI2P7OB35Yf246a9MpUzCg5N40nS6DVIRP1FmJEfUMVPzepF5Bvzu4Hb4








































































o6czoY8Js0O/102hbtB9BefbOFDnpbWvNGOTI6Hduwjvf7Tc2n4tgkk7aSt7TZ92








































































7jWdkQamMHm2H36RSOB2asNUeA6sIMZBsvHHIqkAlD4KyMsaxHuxg1Tw3gbDZtVn








































































ITyVSDvksGv16rACjRu90CW16MZZ+CQ2qzEexLhKWy/AOe1aHWYV2EwOGbL51EUN








































































rZd/MdddAgBaPTQ7TAERl8J0t68Wx0HdNuKFSTKETL6FB4J3vTOLlf5QzKHAnyej








































































Z7wHG7AcwkgBUGUzX841et4KvWiYVTk4G9Jw/zZaVulBM/0KOk0pdUJgFqMl95Ga








































































SmOrQzxuLZ+AMv5Fr46qiHtJr4FkTIbPduAbQiF/vOU9sWeloB3k3u/zcjkwYlgZ








































































s76ySmHrPDS9/FETj4WVuPL0hJIvJmkDCS/ZnRl8zuon3HyAb6o=








































































=oHt+








































































-----END PGP SIGNATURE-----