A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:vulnerability@strawberry.se
Expires: 2025-02-19T23:00:00.000Z
Canonical: https://www.strawberry.se/.well-known/security.txt
Preferred-Languages: en,sv
Hiring: https://jobs.strawberryhotels.com

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEXg2B5L25xCkM1vyWyCAR99hGHjMFAmXnKw4ACgkQyCAR99hG
HjONxwf+OqlnraLV7Gz9pAIGillbWMDNkiLgHnXKdQS3ZMIWnbcasgnlV+pTxUaM
fGBi6hKNIuyWILpkKaGj3GBRq7wYpJ9N2OZyLdN/NeKdMni0jtWj4b1Q6Y3bOMdP
OwtSXH1KknOqKv4wrikW/Bujw2CKGqInnucezDJGpTlp2HIVvWP1I8LXZDOFm2RK
z3wtJlwF3QqMsUUixjn+V4uKSPSF7T734/lXoeIXOBg8KjEdXKvBiNUPf0+mMWLF
uFgWcBzngp6348J8IMkT0G5MQ9IgMn6jb+gu3nlh4sd7CNrs3u1RI2yzPyGW+PqH
WtHn2RSwPO4ZD4nwVKI//MW2mjBHCg==
=YG6x
-----END PGP SIGNATURE-----