A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



#

# Crunchr.com RFC 9116 security.txt

#

# PLEASE BE ADVISED:

# Do *not* use this security.txt unmodified on your own website!

# 



# Canonical URI

Canonical: https://www.crunchr.com/.well-known/security.txt



# The expiration date of this file

Expires: 2026-02-24T12:00:00+01:00



# Our vulnerability disclosure policy

# Please read this first if you would like to report an issue

Policy: https://www.crunchr.com/vulnerability-disclosure



# Our e-mail address to contact us about vulnerability disclosure

Contact: mailto:vulnerability-disclosure@crunchr.com



# Our OpenPGP key (optional)

# We prefer you send us messages *without* OpenPGP.

# If you insist on using it, you can use the PGP public key below:

Encryption: https://www.crunchr.com/.well-known/vulnerability-disclosure-crunchr-com-659f71dfd24f109e-pgp-public-key.txt



# Our security acknowledgments page

# We do not publish a security acknowledgments page (yet)

# Acknowledgments: https://www.crunchr.com/vulnerability-disclosure



# Our preferred languages

# We can offer you a swift and proper response in these languages:

Preferred-Languages: en, nl



# Our security vacancies

# Want to join our team? Please visit our job vacancy page:

Hiring: https://www.crunchr.com/company/careers

-----BEGIN PGP SIGNATURE-----



iQIzBAEBCAAdFiEEEKiDvKNH3x5HkvznZZ9x39JPEJ4FAme8ZkkACgkQZZ9x39JP

EJ7UkQ//Y2btP0SHH5l52TX0KTKLsL8FVaFqODwKOSE50cjYVTU/xDfN3Vt48OfS

b99jQk5KjhbtyzI/GVtEwnqSihd0PGDGk0HCKQj/rrubM+pRTytMXrXpNLU/hxEt

B3g+GNmcx0C/zGmaHjhuMkXF2XUaieVaPxcS8IAdwBZsYcdIOtzxkwX7A4j3hP3B

ZeaMoCClggdAJeobS6ZONAAk5JpnaMqLJ8B2Q/dZ/4mL1WhKtTH2MWLh+DuKoDve

DJ6TpEbCbt0CVmrEz7G0LStKg/05klKr+Rg0JCINyMIPhiz19mLPSM+P3/tCp07X

g77ubmDuEcDuYDw60QyWzSeEWHqHvaSk0l7UBKEXBtvvx6kJhTxmi03he6bpylBW

JvAOPFT62hpzrC/x/UhGNmm3q7/mzBIwnudIQ+HVMzsGdViEQdmlAymxgUTkVFha

2ElakLPrIp1q2owqZySaG8+RBVEwVm2hKckHUek89vczfGoaXHAVEEjAnAiXPbk/

Dzwa/R9l+oTQI7HprxjM6rFpIh0Cso9QCAvgkNjHC8DJoSMUgc+RLFq9mhIlIttJ

ZToDmKICfUvQlZDN54QsqWL6drXQmJw84aFtB5ycOBXyq2gX+7umvENOzWvYN4oR

1TW2/cPSz9tpoIK/Qxuf579A+snf92EzLVuWWViCBHwc64OKj3w=

=yPxZ

-----END PGP SIGNATURE-----