A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


Contact: mailto:security@swm.de
Preferred-Languages: en, de
Privacy: https://www.mvg.de/datenschutz
Expires: 2024-03-01T12:00:00.000Z
Encryption: https://www.mvg.de/.well-known/publickey.txt
Canonical: https://www.mvg.de/.well-known/security.txt
Hiring: https://www.swm.de/karriere/berufserfahrene/it
-----BEGIN PGP SIGNATURE-----
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=4jqQ
-----END PGP SIGNATURE-----