A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



Contact: mailto:security@swm.de

Preferred-Languages: en, de

Privacy: https://www.swm.de/datenschutz

Expires: 2026-01-27T12:00:00.000Z

Encryption: https://www.swm.de/.well-known/publickey.txt

Canonical: https://www.swm.de/.well-known/security.txt

Hiring: www.swm.de/karriere/berufserfahrene/it

-----BEGIN PGP SIGNATURE-----



iQIzBAEBCAAdFiEE8k6VF/zQdEsFCW7Xj+aPI4cNIRwFAmeYqJwACgkQj+aPI4cN

IRwcBw/9GepHknA3N5cqQKWcnOvax5YbzeS0Pe9T3Vp1za3baRCYLwfdgmwfV3e2

G4AJ1If+kBsj8BYlf7NHT65deUQWv2NFrLoS4YLmPXEztFxLiZCGVHRCoam/Pdsj

dU0jnYuUdDn2DCBKQDAICr4tlJoUXzTrtWNl4Hb4Njzp9ipRDf1stfw3WTAI17iU

vpT7DMQD3/859v6GXBZG3dwDEIhXV3mkNyA+WIgXDpvAz25fo/BfDjQkLhu4uJjc

EPxcdu7Vnqe69PZspQaPyUQiXyGMs9my+56qCgTgigIG8bhxYm2U38IoKSqjdr5/

m9PJGv++M+2z1VdMdO58PCvdz/R4P8/2Ua9h86s1kaMyvSojRw+XzxDfFdFZe3oX

+DbTdmgNkifR3zpLZSgvIMnz4+tA736xDHDxQXvEyUYHQ16b8Z2S/mVxYLhKKNDi

p0dKfFLR+uL1qkLUXErkiITvd+f9W/mnbn0EesvUvbGNTLrNENfUPQKtL9WWaln0

hOyg6glOsXyHJ3Y96hL69fZahtd0mTQoIEubsabiHTcjXvVQZUR7XJvMhym4258+

x7oU98kXkqeKmxR05sNf/opWSqcl13avwa00PkVM1BwrlIyel0wuE0wPNhWeR46P

38ugJhgyjk/i8E7j0TTEWpaf8QHFbAlZPBk3oJ09wBEbVMaOLUw=

=YBBf

-----END PGP SIGNATURE-----