A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@eon.com
Expires: 2025-12-31T22:59:00.000Z
Encryption: https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xf6f9fb4d40f95f470d9cebfc477ba6dcfd27aece
Preferred-Languages: en, de
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEE9vn7TUD5X0cNnOv8R3um3P0nrs4FAmWylBgACgkQR3um3P0n
rs5GSg/+NQ3aOTMEUem49+TeqIRZgtnQ3VYUkxm51J16Hve855ZB7EYNytVihOIB
h8NsXxUh7rdcM9XOw3MpnxFYv3HE3yK46a6zxSfAD9Qnxl2vJ2xgV/aHThmx4Rmz
NnBTG64n834RShypf+ZUuk/8zYb1ULiP5H/K6G6R59sPWH+OYxM32Hb16oS1m5gy
OJg+WgyXc/S2PcjiCeDjmSbNpPPlHC13QxDeKBNrEdfEL5QlH1mWFvjxFmBJWKDz
7mldftcqssgnYQ8xv5YaqhYQRAoNDgmjnZ58KeH2BGhx9BjI7lK6/tHty90pt/wk
otaPtSfO3xsN0VfI81MogQmDgVR8sryMmPYUXx214eMVH3ZR3Qt8Bk35vi0WjHr1
08ZCSr0NEzawiYE+Qi93lXRXpsm5tLXroSQ1pG0ZPwvCdWut4TMssqrOmcWksHGC
qA0Tztm31xi6embWywlJCi1TASc9Xm1/EFuU5a7k1cdBYIybwew+NkCt56rVqaMZ
9b2yIhkOoHB1wiL83O4yLkINRKHk5GeOMCcBEXxbhajTqstsuqAlWZmCetyV25d2
xFQknfP971dbOsR0z5+79WA96F/GvReFw3LHKpFXCWz3BFgwCPL37D8zaVwulSqL
THZO///tp5zRImROp1tclYDtmsGiuVQ9BxYTjMHoTFRl47UQxbE=
=tK0b
-----END PGP SIGNATURE-----