A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

# Sydbank - Please use the below point of contact for security findings only, if you as a 
# vendor/salesperson contact us directly on this e-mail will we mark your e-mail as spam.
# Please send relevant information about your security findings to:
Contact: mailto:securitycontact@sydbank.dk

Preferred-Languages: da, en

Hiring: https://www.sydbank.dk/omsydbank/karriere
Press: https://www.sydbank.dk/omsydbank/presse

#########################################################################################################################
# Bug Bounty / Reward Statement                                                                                         #
# -----------------------------                                                                                         #
# Sydbank do not have a bug bounty/reward program and will not offer paid bug/security rewards.                         #
#                                                                                                                       #
# As we are not a part of a bounty/reward program please bear in mind that if we detect any suspicious behavior         #
# we will respond accordingly.                                                                                          #
#                                                                                                                       #
# Best regards                                                                                                          #
# Sydbank IT Security                                                                                                   #
#########################################################################################################################