A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Expires: 2027-04-20T12:00:00.000Z

# Canonical URI
Canonical: https://ifm.com/.well-known/security.txt

Preferred-Languages: en, de

# Our security address
Contact: mailto:security@ifm.com

# Our security policy
Policy EN: https://www.ifm.com/us/en/shared/responsible-disclosure
Policy DE: https://www.ifm.com/de/de/shared/responsible-disclosure

# Our PSIRT address
Contact: mailto:psirt@ifm.com

# PSIRT OpenPGP key
Encryption: https://media.ifm.com/CIP/mediadelivery/asset/ce310eaafd5c3b41b38217428b106a0b/ifm_Product_Security_and_Incident_Response_Team_0x6DA17CC4.asc
Fingerprint: 3C01 1315 5E75 6232 B69F 6457 42F7 9848 6DA1 7CC4

# ifm Security vulnerability policy
Policy DE: https://www.ifm.com/de/de/shared/service/technischer-support/produkt-security-uebersicht
Policy EN: https://www.ifm.com/de/en/shared/service/technischer-support/product-security-overview

# ifm Common Security Advisory Framework (CSAF) publications
CSAF: https://ifm.csaf-tp.certvde.com/.well-known/csaf/provider-metadata.json
-----BEGIN PGP SIGNATURE-----
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=2/IX
-----END PGP SIGNATURE-----