A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# created with https://securitytxt.org/
#
Contact: mailto:security@dcso.de
Contact: mailto:blueteam@dcso.de
Expires: 2026-01-31T23:00:00.000Z
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/5C6B6CACCAD86F4A5652ED1E154D1D0B5372D681
Preferred-Languages: en,de
Canonical: https://www.dcso.de/.well-known/security.txt
Policy: https://www.dcso.de/en/responsible-disclosure-policy/
-----BEGIN PGP SIGNATURE-----
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=+cue
-----END PGP SIGNATURE-----