A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



Contact: security@jfrog.com

Encryption: https://jfrog.com/security/public-key.txt

Preferred-Languages: en

Canonical: https://jfrog.com/.well-known/security.txt

Hiring: https://join.jfrog.com

-----BEGIN PGP SIGNATURE-----



iQIzBAEBCAAdFiEEwaQ9uCd/KOUCb3xUx408KLH0g48FAl/YtDoACgkQx408KLH0

g4/5LA//UyPqnbi9zVzh3k4rXVH/X85zkqkzeOVAIrsB0mzFGoos6+oCHuSpt6l6

wME5YfBUx8wJ1Gcf/fN9AYSVE0jyHzAuK0lVd+tgiXUlYxXCWQo8p2VHMrvNxgxo

JrEcNoJiclADTeyEHw5To8X/tbSXkmn6oySE1N8i2O5tnkfJxLa/bfOV2s/tAcSF

QVlsSLzhG703LVw0vKtQkb/U7kqCk07wl+z6h+AAELUwjcIHXzjQ3r3NELu5RJdq

8Ad8JcpwmJ8gRj8KP1aezEcNX/hLOz9GoBFP84rKk10NLNah3Zee/fg0gvzTty2w

oyG3SNA3K6zCKFCUKriHg7444nHxJt7U75DUoUUaexBeEHflAD7KrXU5GJrHnsWp

+cDrEJ0PL4+X1tBvc7F8LhEWp1TJC627XzqV+N0nklWN6m3YyGcKxeZBdqqGbCTw

VtdHBCgKk8jSRCsLKvyKE0mJeiPpwCZd3CEOkT1z+eClyKkDbnVltlKDXBKKzan6

fIjaUaPlWE9WhT2YRC1V/yHZLVMAas23SH7MN9RWQ7io93HbAQG22jvCD2ouiviY

f0wljHV4fp744USl1uHzxV5+ROEsj0PSjNnWzRp9Sfu6b1uRJoMFv8nnPzQHADfH

Z8vnrfxibLh9BuTBhhrjCHccnwv9ujVNKBdSsoFtZvdvQjmhp/Q=

=fXJP

-----END PGP SIGNATURE-----