A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



Contact: mailto:chris.windram@quoox.com

Encryption: https://pgp.key-server.io/search/chris.windram@quoox.com

Preferred-Languages: en

Canonical: https://quoox.com/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----



iQEzBAEBCAAdFiEEDCQ7vQPcu2DWJGkYCDS6a/3XkwkFAl3fvmsACgkQCDS6a/3X

kwl8GQgAhIiA+PyluuoYNLpPy5qR+nEqyKsdgXOg1uGNm5zmSuCnW4ca8UtR6w6T

1uIenuJCOk/ih7dKV85TJ9RHXrpDvLrn0zB9PHPkT39MEOCllft8mvmLy1nSk+qd

QujkTAC5KHx1Vcf5ARzVoJfNBlybaxWPt0ZAsTcHygARyiagGdNYTfeE31Yag7LN

WG2mmn/rpnFvIqtHUXG6hDvZDsHw7LHSWkeAwRlSFYwme8NmQjgTrJQCeUFpVYPq

zpAcNSWI4ul0iYCdlYSzPE23WH/PuuBUr1tRsZkUFbuG6rCD0IGMqlfJN6ijMoY3

5Zv+kWWa9Gfc5NeAtwHyn8e7i6eNVg==

=tue6

-----END PGP SIGNATURE-----