A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:cert@ekom21.de
Expires: 2025-02-08T12:00:00.000Z
Encryption: https://www.ekom21.de/meta/pgp-verschluesselung/
Preferred-Languages: en, de
-----BEGIN PGP SIGNATURE-----

iQGzBAEBCAAdFiEE2Ujul3o8NvlIUilzOoo0lwt3WcoFAmPvd1wACgkQOoo0lwt3
WcoOPgv/XnYRI/3Wzp8YtuvXwC9oMynaGiSm0b8jyGHxaeSVJVY8okn0uf0pr9Rs
TEP4xrLKKl0sTnXd2sFJJl2wvO5d7vuoiK8j33qa8Cqgw0n7CbkLy0ZEvjBJGWHD
HbKwQ1p/ts0ldFbGJfuSdMcYi0h9xtA16C2Doi4ZpWjllbPxd/yK628O8vGDGOue
iwtjRJh7IGUCBl1DtysQCNbhTwVkoBJlAUk6+qmEXCGk1cUTk0FXj9PltwpdIoZs
6LiQ19JEz7yvo6yirx5Hgw255rflKaIVwqmTW+Pu0QR+XEcSWtsYTBF2fNKW/E9I
2tonMLHXsipHfKP40LezKov5BQs7anGUyU6vjWYPtsyWoQEY58bd+QxCfU/IRy60
nzzRBYvy5ojDvm+szqHVq0GVzeU2Uh8O40TzrvqHJFDzEqxYHE9LEnnuULnbu0L6
KvlweHsWabrQkNl+1/je+rzbQ4sMud2joVwuv4l4inasskJKIG82ELtZiAOIi0uA
/8dUhkJf
=RlM5
-----END PGP SIGNATURE-----