A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: https://openbugbounty.org/bugbounty/Babiel/
Acknowledgments: https://www.bundesbank.de/security/acknowledgments
Preferred-Languages: de, en
Expires: 2023-06-23T12:00:00.000Z
# Verify security.txt by public key https://www.bundesbank.de/security/E37968A89F2714397292917EB404CA3B7D8E35E9.txt
-----BEGIN PGP SIGNATURE-----
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=+GSG
-----END PGP SIGNATURE-----