A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:it-sicherheit@uni-frankfurt.de
Expires: 2024-05-10T10:00:00.000Z
Encryption: https://uni-frankfurt.de/security/it-sicherheitATrz.uni-frankfurt.de.crt
Encryption: https://uni-frankfurt.de/security/it-sicherheitATrz.uni-frankfurt.de.asc
Preferred-Languages: de,en
Canonical: https://www.uni-frankfurt.de/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQRQ5uqbev0lU0V8d8in9LNehbsrqgUCZF31EwAKCRCn9LNehbsr
qu/ZAQD2uJf0A3p1x3nXS8X9z6d2AfDcmH4vT0jhr2cMcXf3wgD7BI+8lN+2hz0o
hkTRB+X5abfeB4FVWEblb8jdO5YELQY=
=FvNX
-----END PGP SIGNATURE-----