A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

# In case of security incidents please contact the
# Wingo Security Team
Contact: mailto:security@wingo.ch

# For vulnerability reports please contact the Swisscom Bug Bounty Team
Contact: mailto:bug.bounty@swisscom.com
Contact: https://www.swisscom.ch/en/about/security/bug-bounty.html
Policy: https://github.com/swisscom/bugbounty

# Open positions
Hiring: https://www.swisscom.ch/en/about/career/vacancies.html?f=20%3A1018327&p=1
Hiring: aHR0cHM6Ly9pbWd1ci5jb20vYS9kaFlkUXpq

Expires: 2023-12-31T23:59:59.000Z
Preferred-Languages: en, de, fr, pl