A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Security Contact for diconium

Contact: mailto:security@diconium.com
Encryption: https://diconium.com/security-pgp
Preferred-Languages: en, de
Canonical: https://diconium.com/.well-known/security.txt
Hiring: https://jobs.diconium.com
Expires: 2024-05-02T12:00:00.000Z

-----BEGIN PGP SIGNATURE-----
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=ZtI+
-----END PGP SIGNATURE-----