A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA512



Contact: https://www.atlassian.com/trust/security/report-a-vulnerability

Contact: mailto:security@atlassian.com

Expires: 2024-05-11T00:00:00.000Z

Encryption: https://security-static.prod.atl-paas.net/atlassian-security-public.asc

Preferred-Languages: en

Canonical: https://www.atlassian.com/.well-known/security.txt

Policy: https://www.atlassian.com/trust/security/report-a-vulnerability

Hiring: https://www.atlassian.com/company/careers/all-jobs?team=Security

-----BEGIN PGP SIGNATURE-----



iQIzBAEBCgAdFiEEQzwkaJzfBxmei5k9vfUGWewU+x4FAmRecy4ACgkQvfUGWewU

+x5ToRAAledxUafmv7K2aHKur6t0we15+Aqu17Hu/SGMtDZ8dUX0qL/7P7H4vHUQ

nYH9qDTFFlPye7aAqeDLIJ1IUbJaj++r3lurjZ6S4FiO6r+P2rreOYMjMl3TwSDt

zwqY1kVWOLLvUp/NyJvhk+3M0KiRuGCOeKsjCZBcJbz57lPjbgsLo+qAU1BjaPUK

KpkvSUlfGmaDEiEQvlWRKZR2uT+KiXy8tVskbRrSCSL7Zm/Ipox3Mwr7m72CfBQY

+5QGIy1UHH4NFykkCNQpxR2TqTRJTi3BRM3xf8zUvqTNpQBlKYobsMJXWpFDCs8a

I/KSV1DlNLfozmsWbRnnZULeEkNH+0oL1XHWC9yIqbHdeT68mus4bCwjzj3cSql9

yZrP3Ri5osqk7MVb0o9D/a8d41drV6dZZLmNSb08JHBP1t5vx8r37qoYyQf+stYO

Y9+MGWbA1HDzHHul2hpyAGVvzfwYio1gV1UPVCVXbQCsbHQz/SySrysqHIjU1tU3

AZ6yYQGFPUwzoKwQjZ9TydX5JqdSppycb2Pj24oO099HbqewHvrGwt2C26oytz3C

7nNgY6F2jYm/s1l6QlZTpusm0rS0uyrbsKagwRQjRuXq4WHHKBXx9FCmhuakmBH6

Y7hw4rqQoBT6UmseccpHgZZ58k3WD9oBXmSU0REEXOL93sr+c7E=

=Nv33

-----END PGP SIGNATURE-----