A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:vulnerability@strawberry.se
Expires: 2025-02-19T23:00:00.000Z
Canonical: https://www.strawberry.fi/.well-known/security.txt
Preferred-Languages: en,sv
Hiring: https://jobs.strawberryhotels.com

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEXg2B5L25xCkM1vyWyCAR99hGHjMFAmXnKyUACgkQyCAR99hG
HjMSkAf/X03vbO+m248GY9Y+EpSJW5WQHhNjQE8o+T/pSxqLm++bKyfMClRLBozw
ZnpZ6Yen8GHgoI45uo8xPwt65ZC4JLmng4wmp/gDRfquk0TV/jgaGvq4i+3bOiof
nruEA0rLC0szaYiZUz7XXDznTMDJXxuMKYzZO4C6sk+imvjFrEvZ7smD7sPVfwIf
/Y76lNDuKdt+TDGDNxlSHk7PsQUG3tqythJvydEyLC0HzR7Q4s5p3CvkxZEM1qJe
J0VZGsqfBsQIe5zH+YXqzm4eLOMVCiTrbPMR02erIdZ8asscNyuKpsuiPJHdeOjG
JvQw3xqK8TuHTxsnMZVlMiGWqCKuiQ==
=gS26
-----END PGP SIGNATURE-----