A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----







































































Hash: SHA256















































































































































# Canonical URI







































































Canonical: https://www.catawiki.com/.well-known/security.txt















































































































































# Our security address







































































Contact: mailto:security@catawiki.com















































































































































# Our OpenPGP key







































































Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/5647963D3100AA8CB88A262AF8F98E8B2D29F2F5















































































































































# Our security policy







































































Policy: https://www.catawiki.com/en/help/buyer-terms/responsible-disclosure-statement















































































































































# Our open security-related jobs







































































Hiring: https://catawiki.careers/vacancies







































































-----BEGIN PGP SIGNATURE-----















































































































































iQIzBAEBCAAdFiEEVkeWPTEAqoy4iiYq+PmOiy0p8vUFAmPZGUUACgkQ+PmOiy0p







































































8vVhLQ/9H2iO4LaurSTrc4epFy4n3qthn4WAy6li7Q3KgcXmHLb/cGAIhw12+HjT







































































bviYcqbuPefUlhzI4nGvPSpGkbhUYnM3EZ9jXoBBKbefYeTT9pFnXBjHYJo6oSko







































































AJ+KL0pGfAKP/GGleOj4AdAUrSk1eMI0YfsuqVZjE4E3Ce3zvA/yXH+i5hNna9Fo







































































xjjCLmikI2P7OB35Yf246a9MpUzCg5N40nS6DVIRP1FmJEfUMVPzepF5Bvzu4Hb4







































































o6czoY8Js0O/102hbtB9BefbOFDnpbWvNGOTI6Hduwjvf7Tc2n4tgkk7aSt7TZ92







































































7jWdkQamMHm2H36RSOB2asNUeA6sIMZBsvHHIqkAlD4KyMsaxHuxg1Tw3gbDZtVn







































































ITyVSDvksGv16rACjRu90CW16MZZ+CQ2qzEexLhKWy/AOe1aHWYV2EwOGbL51EUN







































































rZd/MdddAgBaPTQ7TAERl8J0t68Wx0HdNuKFSTKETL6FB4J3vTOLlf5QzKHAnyej







































































Z7wHG7AcwkgBUGUzX841et4KvWiYVTk4G9Jw/zZaVulBM/0KOk0pdUJgFqMl95Ga







































































SmOrQzxuLZ+AMv5Fr46qiHtJr4FkTIbPduAbQiF/vOU9sWeloB3k3u/zcjkwYlgZ







































































s76ySmHrPDS9/FETj4WVuPL0hJIvJmkDCS/ZnRl8zuon3HyAb6o=







































































=oHt+







































































-----END PGP SIGNATURE-----