A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:j.kuder@swissnwx.ch
Expires: 2026-12-30T23:00:00.000Z
Encryption: https://www.it-statistik.ch/j.kuder@swissnwx.ch.pub.asc
Preferred-Languages: de, en
Canonical: https://www.swissnwx.ch/.well-known/security.txt
Canonical: https://www.it-statistik.ch/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCgAGBQJiCOgsAAoJEAgi+aJWMRZPEjYH/0etWdsPjZ48Wite16WkkdUC
yjcoi+Rr9c1c0p0PJhU37HzJVwmWCCy2xsJUThO6l/b4ovdI7RYCHDA20Ju9ASHZ
muG/2LoKCB+nNR/AH2Fwd6M8hDQEPRnOpFw+gHzajBcGlGd5aHYom/AEpuLy6LTn
bIDMca8lgtS0WUUjzJKmmJ5miAtIBy2KA/4VoEorDyNU4qwi5JWa0+oiowGNzmV8
iSpqF63kjztHyf+QZ6AtZ0j/VT2YritJ21SC8oqkmmgnJ+SQr9eW9uCBRFYbJcjJ
RPMpxW2IFB9A1fNve6nq0mCqZnNdYB5CVvXHOhYLyiEYgdRg1ag/tv4rjXa92Ck=
=fONy
-----END PGP SIGNATURE-----