A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@swm.de
Preferred-Languages: en, de
Privacy: https://www.mvg.de/datenschutz
Expires: 2026-01-27T12:00:00.000Z
Encryption: https://www.mvg.de/.well-known/publickey.txt
Canonical: https://www.mvg.de/.well-known/security.txt
Hiring: https://www.swm.de/karriere/berufserfahrene/it
-----BEGIN PGP SIGNATURE-----
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=3q+v
-----END PGP SIGNATURE-----