A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----






































Hash: SHA256













































































# Canonical URI






































Canonical: https://www.catawiki.com/.well-known/security.txt













































































# Our security address






































Contact: mailto:security@catawiki.com













































































# Our OpenPGP key






































Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/5647963D3100AA8CB88A262AF8F98E8B2D29F2F5













































































# Our security policy






































Policy: https://www.catawiki.com/en/help/buyer-terms/responsible-disclosure-statement













































































# Our open security-related jobs






































Hiring: https://catawiki.careers/vacancies






































-----BEGIN PGP SIGNATURE-----













































































iQIzBAEBCAAdFiEEVkeWPTEAqoy4iiYq+PmOiy0p8vUFAmPZGUUACgkQ+PmOiy0p






































8vVhLQ/9H2iO4LaurSTrc4epFy4n3qthn4WAy6li7Q3KgcXmHLb/cGAIhw12+HjT






































bviYcqbuPefUlhzI4nGvPSpGkbhUYnM3EZ9jXoBBKbefYeTT9pFnXBjHYJo6oSko






































AJ+KL0pGfAKP/GGleOj4AdAUrSk1eMI0YfsuqVZjE4E3Ce3zvA/yXH+i5hNna9Fo






































xjjCLmikI2P7OB35Yf246a9MpUzCg5N40nS6DVIRP1FmJEfUMVPzepF5Bvzu4Hb4






































o6czoY8Js0O/102hbtB9BefbOFDnpbWvNGOTI6Hduwjvf7Tc2n4tgkk7aSt7TZ92






































7jWdkQamMHm2H36RSOB2asNUeA6sIMZBsvHHIqkAlD4KyMsaxHuxg1Tw3gbDZtVn






































ITyVSDvksGv16rACjRu90CW16MZZ+CQ2qzEexLhKWy/AOe1aHWYV2EwOGbL51EUN






































rZd/MdddAgBaPTQ7TAERl8J0t68Wx0HdNuKFSTKETL6FB4J3vTOLlf5QzKHAnyej






































Z7wHG7AcwkgBUGUzX841et4KvWiYVTk4G9Jw/zZaVulBM/0KOk0pdUJgFqMl95Ga






































SmOrQzxuLZ+AMv5Fr46qiHtJr4FkTIbPduAbQiF/vOU9sWeloB3k3u/zcjkwYlgZ






































s76ySmHrPDS9/FETj4WVuPL0hJIvJmkDCS/ZnRl8zuon3HyAb6o=






































=oHt+






































-----END PGP SIGNATURE-----