A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Our security address
Contact: mailto:office@digitale-gesellschaft.ch

# Our prefferred languages
Preferred-Languages: de, en, fr

# Our OpenPGP key
Encryption: https://www.digitale-gesellschaft.ch/uploads/2011/07/Digitale-Gesellschaft.asc

Canonical: https://www.digitale-gesellschaft.ch/.well-known/security.txt
Expires: 2032-04-28T15:20:00z

-----BEGIN PGP SIGNATURE-----
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=2hfH
-----END PGP SIGNATURE-----