A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:ade@adebaumann.com
Expires: 2024-12-30T22:00:00.000Z
Preferred-Languages: en,de,fr
Canonical: https://www.adebaumann.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEE8tHdiiXtdUXdwSWxzkF9V3RNqVAFAmGbcM8ACgkQzkF9V3RN
qVD5vw/8Dn7luEYqquRRvh3FQ0zcrqVGENUi1DVQCNhFLo5Tixs5D2Ptr5JLbsYR
KCXqaxNn/bpS/gXRzevIc39MOTwhHADigONmsMua4mi2Z03tzaeikfJufVf2Pgvu
IeyLsTBqNxCrudIcPitWMjkATc9Ns2e/dtQquXPkiADWQ/V8XJfus2Xik/x+cUt0
JQV0uPcK9CGhZc0uVRpk23ihmGC5fY5Lib0th+Gy3HuZH4u5EN8wGCK9unX7IiRc
aq/7DKsEnJEGRjJiidepJ3WmsAO0HfqghrmUoK6c0SU97WfyPXRfrDlXAhvktTLw
da0jqkc1KSfiAy4wBS4szdYtFipsoLl1goQkWvKAJmP5Hyqb5TEnU9dSS6meWUvv
y7i8dXC8PYBjDVNSCBHaeQz0HbxoljFItmisuzip+fCuWGcCBpXmdoHM7CdldP3b
S0ADuV8QKd94z3P/QoBM8HMiXjmSFeNnT9E42+oT5HixQQ35fNb/3s5oBX4AKnMe
fOhrRdhcs8lnB/Q7PWCj9KHRO1tsb8dHV7qE9EQqVunOHXHY3IKzos9UAPDBJvUz
uQMb4KLGbkFZ099cMygaUY/Sl9BSXgypXhnT7n3Bk0F1A8iBIy7JkMhOjWNS71k5
dqRWwBwygZo9nD/BJ+/hc3+7tc59TbtMfE7j1f9RcPkfkQ37n6Y=
=5LSg
-----END PGP SIGNATURE-----