A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Our security address
Contact: mailto:abuse@cuni.cz
Contact: https://csirt.cuni.cz/en/contact

# Our OpenPGP key
Encryption: https://csirt.cuni.cz/en/publickey.asc
Encryption: https://keys.openpgp.org/search?q=3F76F3C999DA105979005B4C2FC53DCB10AA8BE1

# Our security policy
Policy: https://csirt.cuni.cz/en/incident_reporting

# Out security acknowledgments page
Acknowledgments: https://csirt.cuni.cz/en/acknowledgements

Expires: 2024-02-28T18:00:00Z

-----BEGIN PGP SIGNATURE-----

iQFCBAEBCAAsFiEEP3bzyZnaEFl5AFtML8U9yxCqi+EFAmTtqZgOHGFidXNlQGN1
bmkuY3oACgkQL8U9yxCqi+FT0wf/cZaCN1lnLR4tgfehi5yHlFCyS3DFa85vCgV+
mKR+PI1/KprF20GHMCZzg8IFvEK+FQwbiHycsntz4gPZ+KKliDFtnQpvJ/w6ATGs
O+xt0VP3r+R1N2P2GChU7go7QM/+ErA2zz9Se26xShvQA/aFclzNi4opzjqhd5h8
rQA/jsXQ3BXHB7zEXfLbXJDsPau4/p0G7x4AOBglBpHv7LRLCDH1A8WEPnIa96Cc
a26adzbDTt4MfxxVuwOgn33PRgORNMrRY641aKMXjMwg9Lk5wqgCWNtIK6xBgqyx
pC7jbdNqM5JWWyp0FJH8W5n5E2a7TZZRjqruCYsvsURq95ayow==
=SNaM
-----END PGP SIGNATURE-----