A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@kraxnet.com
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/0ECE09253E2394088F47077CC9C4569EB636C3DB
Encryption: https://kraxnet.com/security/publickey.txt
Policy: https://kraxnet.com/security/policy
Preferred-Languages: en, cs, sk, de
Canonical: https://kraxnet.com/.well-known/security.txt
Canonical: https://www.kraxnet.com/.well-known/security.txt
Expires: 2025-01-01T00:00:00.000Z

#  **   **  ******  ******  **   ** ******  ******  **
#  **   **  **   ** **   ** **   ** **   ** **   ** **
#  **   **  **   ** **   ** **   ** **   ** **   ** **
#  ******  ******* ********   ***   **   ** ******* *****
#  **   **  **   ** **   ** **   ** **   ** **      **
#  **   **  **   ** **   ** **   ** **   ** **   ** **   **
#  **   **  **   ** **   ** **   ** **   ** **   ** **   **
#  **   **  **   ** **   ** **   ** **   ** ******  ******
-----BEGIN PGP SIGNATURE-----

iIsEARMIADMWIQQOzgklPiOUCI9HB3zJxFaetjbD2wUCZZ6iZxUcc2VjdXJpdHlA
a3JheG5ldC5jb20ACgkQycRWnrY2w9uOXQEAk6QZjRdAS6E5rQQvqh4TYI3nXpsV
aOvyfx/kzIkNC10A/0HEIQmBkHX7amY8f6Vn9KpJ58axXG4a5blp2P61fney
=Z0u7
-----END PGP SIGNATURE-----