A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@starfinanz.de
Expires: 2024-12-31T22:59:00.000Z
Encryption: https://www.starfinanz.de/.well-known/pgp-key.txt
Encryption: https://www.starmoney.de/.well-known/pgp-key.txt
Encryption: https://www.sfirm.de/.well-known/pgp-key.txt
Preferred-Languages: de, en
Canonical: https://www.starfinanz.de/.well-known/security.txt
Canonical: https://www.starmoney.de/.well-known/security.txt
Canonical: https://www.sfirm.de/.well-known/security.txt
Hiring: https://www.starfinanz.de/karriere/
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQSidzJHNfNmx7BqzVvmatfkYLMyXgUCYhSRVgAKCRDmatfkYLMy
XiSlAQDERjF52TSjue/LFb1dfggv4aXFkQgC16CTZ/34q3KcnwD/TCqhLc6nC0Zh
RsiQwDejjOtB87W/KW0x1Zh+eR9Eawo=
=UXA4
-----END PGP SIGNATURE-----