A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@insiderpie.de
Expires: 2024-12-31T23:59:00.000Z
Encryption: https://insiderpie.de/pgp-key.txt
Preferred-Languages: en, de
Canonical: https://insiderpie.de/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=nROU
-----END PGP SIGNATURE-----