A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

# For security incidents and vulnerabilities in web services:
Contact: mailto:infosec@purestorage.com

# For security issues concerning Pure's products
Contact: mailto:support@purestorage.com
Contact: https://support.purestorage.com/Pure_Security/How_to_Report_a_Security_Incident

# Join the team!
Hiring: https://www.purestorage.com/company/careers/opportunities.html#it
Hiring: https://www.purestorage.com/company/careers/opportunities.html#engineering

# Additional security.txt info
Encryption: https://pgp.mit.edu/pks/lookup?op=get&search=0x5B4FD21030353538
Preferred-Languages: en
Last-Updated: 2022-04-29T18:47:21.000Z
Expires: 2025-05-01T19:00:00.000Z