A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:it-security@pixum.com
Expires: 2023-04-01T10:00:00.000Z
Encryption: https://pixum.com/.well-known/security/pgp-keys.txt
Preferred-Languages: de, en
Canonical: https://pixum.com/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----
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=yEng
-----END PGP SIGNATURE-----