A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: security@timkuffner.de
Expires: 2022-04-30T22:00:00.000Z
Encryption: Encryption: https://keybase.io/tim_kuffner
Preferred-Languages: en, de
Canonical: https://timkuffner.de/.well-known/security.txt
Canonical: https://timkuffner.de/security.txt

-----BEGIN PGP SIGNATURE-----
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=enD5
-----END PGP SIGNATURE-----