A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA512

Contact: https://www.punktum.dk/en/articles/responsible-disclosure-of-security-vulnerabilities

Contact: mailto:disclosure@punktum.dk

Expires: 2025-04-01T09:00:00.000Z

Encryption: https://www.punktum.dk/files/2023-04/dk%20-%20Disclosure_0xDE4BE592_public.txt

Preferred-Languages: da, en

Canonical: https://punktum.dk/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQT/HiZR3MSNGVpe0p6RKhD13kvlkgUCZhaI1QAKCRCRKhD13kvl

kux5AQDXAa+CHcHzu9i1QNjVPXoTqmRykVttPCM3xYnUZ7lBKwD+Od2g4z9xi83W

q5MH4rTjUS9LKlvudwJKIfLTZyEgHQc=

=lZ7r

-----END PGP SIGNATURE-----