A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

# Our security address
Contact: mailto:security@danfoss.com
# Our OpenPGP key
Encryption: https://files.danfoss.com/download/various/psirt_danfoss_com_0x69C115C5_public.asc
# Our security policy
Policy: https://www.danfoss.com/en/service-and-support/coordinated-vulnerability-disclosure/vulnerability-disclosure-policy/
# Our security acknowledgments page
Acknowledgments: https://www.danfoss.com/en/service-and-support/coordinated-vulnerability-disclosure/hall-of-thanks/
Expires: 2025-12-30T16:00:00.000Z