A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



Contact: https://www.atlassian.com/trust/security/report-a-vulnerability

Contact: mailto:security@atlassian.com

Encryption: https://security-static.prod.atl-paas.net/atlassian-security-public.asc

Preferred-Languages: en

Canonical: https://www.atlassian.com/.well-known/security.txt

Policy: https://www.atlassian.com/trust/security/report-a-vulnerability

Hiring: https://www.atlassian.com/company/careers/all-jobs?team=Security

-----BEGIN PGP SIGNATURE-----



iQJLBAEBCAA1FiEEXh3qw5vbMx/VSutRJCCXorxSdqAFAl5PSvoXHHNlY3VyaXR5

QGF0bGFzc2lhbi5jb20ACgkQJCCXorxSdqDkgQ//ZNpY4XBxQPVGSqpUgDVdknZh

CJupdpSV0WK0LgsXBQfFFp+6Rcb8m/2YaYVxh/F0XGu8rX9lqm46FVX2gJAC7hW0

Rgyl6KFoqbj3PeHsAHPzRussRo315jWcTe/6T1uKXEV9nt+0xFwORiielZVL4jfv

O107gykCQr7Z7FOrdk3+dHOviOw8M8fdkx5uctKy/gwMddnKdYYWRB4NcbvmZjjO

ShGXn8SU528fB575N/ElBGL1pn8a7zJ4m0ucOeAoVkuoIp2VsgaUxXzDnSm9c2FC

fhTe4LG4gn/LaiXWAGMLa1KMZFB7kGp8JPD4jfQN8zI40I6ZKzZvRk6ktXpymEXP

vpD/5oskmB5tjow+9eEzINhUxHfltlI8VVVAI22+oNUTR6Pmx7u9opVnHdyxB+ew

+Gf8NhUeNEjs9zL5dZXX+RoHDfzLBwVx8f2rDXRdwo+VkkETRXibTdVKqx+o2sAY

sPuD4vAYD2InpfbTuMkEe9/N2Y6te3kgyt6I8ps7kDIlzN4syvgi2ml54BRt4OcO

5jjdcolepLwLHJRicvXTJ9tDkHA6D59cHbqwmcxjrwsys7Txsod6GHIASJ3fhLFa

ZfIP+q2WrkKwyjpsybwb2zHcscd2mV5S3w8q7UPPEOkhF199+FnF0XjCkfa9tZtj

bXR9DfC0pEpqVwaDtV4=

=OUdQ

-----END PGP SIGNATURE-----