A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: tel:+49 1704853611
Contact: mailto:hostmaster@bloms.de
Preferred-Languages: de, en
Encryption: https://bloms.de/.well-known/gpg-key.txt
Canonical: https://bloms.de/.well-known/security.txt
Canonical: https://bloms.eu/.well-known/security.txt
Canonical: https://bloms.info/.well-known/security.txt
Expires: 2026-03-31T00:00:00+00:00
-----BEGIN PGP SIGNATURE-----
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=IUpP
-----END PGP SIGNATURE-----