A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: tel:+49 1704853611
Contact: mailto:hostmaster@bloms.de
Preferred-Languages: de, en
Encryption: https://bloms.de/.well-known/gpg-key.txt
Canonical: https://bloms.de/.well-known/security.txt
Expires: 2024-04-02T22:00:01+00:00
-----BEGIN PGP SIGNATURE-----
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=rCk6
-----END PGP SIGNATURE-----