A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:info@dus.net
Expires: 2025-12-22T23:00:00.000Z
Encryption: https://my.dus.net/.well-known/gpg.asc
Canonical: https://www.dus.net/.well-known/security.txt
Canonical: https://dus.net/.well-known/security.txt
Preferred-Languages: en,de,es,fr
-----BEGIN PGP SIGNATURE-----
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=uii7
-----END PGP SIGNATURE-----