A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

#
# F1-CONSULT RFC 9116 security.txt
#
# PLEASE BE ADVISED:
# Do *not* use this security.txt unmodified on your own website!
# 
Canonical: https://f1-consult.com/.well-known/security.txt
Canonical: https://www.f1-consult.com/.well-known/security.txt

Expires: 2023-12-31T23:00:01+00:00

# If you would like to report a security issue please first read our
# responsible disclosure policy:
Policy: https://www.f1-consult.com/cybersecurity/reporting-a-security-breach
Policy: https://www.f1-consult.com/about-us/datenschutz/
Policy: https://www.f1-consult.com/about-us/legal-notice/
Acknowledgments: https://www.f1-consult.com/agb/

# Please always try to contact us through our responsible disclosure form
# to speed up things. Should that not be an option, then in order of
# preference the ways to contact us are:
Contact: https://www.f1-consult.com/cybersecurity/reporting-a-security-breach
Contact: https://www.f1-consult.com/about-us/impressum/
Contact: mailto:csirt@f1-consult.com
Contact: tel:+49-9131-610310

# We can offer you a swift and proper response in the following languages:
Preferred-Languages: de, en

#
# ______ __        _____                       _ _   
# |  ___/  |      /  __ \                     | | |  
# | |_  `| |______| /  \/ ___  _ __  ___ _   _| | |_ 
# |  _|  | |______| |    / _ \| '_ \/ __| | | | | __|
# | |   _| |_     | \__/\ (_) | | | \__ \ |_| | | |_ 
# \_|   \___/      \____/\___/|_| |_|___/\__,_|_|\__|
#

# We do not only use OpenPGP!
# For Email Exchamge please consider using the S/MIME public key below:
Encryption: https://f1-consult.com/.well-known/csirt_f1-consult.com.crt

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.2

iQIzBAEBCgAdFiEEK6EuJrQVWXZ4clV6nzMUHCGKI94FAmRU9m8ACgkQnzMUHCGK
I97zwxAA43k9GYOudAyor88V9yvtu5nSc9RmZZxDJTbGAvjvaiy8DkjSy/ItWSuu
vhwHHkMucLrtex+jXLuC2B+EeBfokPLHTxE5vepdpsYGQAjXuo/w7BmL/OuJRQxY
3jmvmATF73DbVAAWxlkEzfqS65hGJ7gxBQtVA+nS/zLHZuzCUQExXZT3LpDugzgu
HGTt5/bga04C2k4vkvGouKzbhsm6EXhytHbpmH5ZC5iQm6q44uUuX4T13HPv1VFW
736Jnfcf/PTldPjlJWSA8juMN+YGzH27K3W/ABWUWBlkbrRcKHUSJdG6dDlnrYq2
Ya+slbRbAj3y1pRspwxzVzgwoWdcMXCh8dsi3ut3Rdf3ebSoMDV3Nw1V0jfFfYp9
MZcPDjSICN5YckOaDsHPMAQ6xKljSU2RGkCSsWN7b10qXaU1G41p1LkqvoZFZUSo
srfznnV8mX0e1AkyEuyZ25hpmk2MoibKSEjoGGonnMSO9jB6wc0e8Cye7ZVo09nP
4quCSBOMMNcj0QsIttdWHF65NWNmTlcYWlSgF3PtlsmERr9w2fU3FYpLfNiv/2ln
MRMD56+fMlqkt4Z4pBQ6bilHH9PKPm9+WVDni1BzLBbFDwUdsZQExWiCS44Cx4Wa
dYJR9d15qwQqUI7rxVt1K9LuukWx34quCPc6rz7hQ7tKUqnnTwg=
=gci3
-----END PGP SIGNATURE-----