A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

# ZEISS Security.txt 

## Contact e-mail address
Contact: mailto:vulnerability-disclosure@zeiss.com

## Expiration date
Expires: 2026-03-31T22:00:00.000Z

## PGP-key
Encryption: https://www.zeiss.com/pgp-key.txt

## Prefered languages
Preferred-Languages: en, de

## Our disclosure policy
Policy: https://www.zeiss.com/corporate/en/legal-information/legal-notice-and-general-terms-and-conditions.html#vulnerability-disclosure-policy

## Looking for a job?
Hiring: https://www.zeiss.com/career/en/job-search.html