A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Our security address
Contact: mailto:abuse@cuni.cz
Contact: https://csirt.cuni.cz/en/contact

# Our OpenPGP key
Encryption: https://csirt.cuni.cz/en/publickey.asc
Encryption: https://keys.openpgp.org/search?q=3F76F3C999DA105979005B4C2FC53DCB10AA8BE1

# Our security policy
Policy: https://csirt.cuni.cz/en/incident_reporting

# Out security acknowledgments page
Acknowledgments: https://csirt.cuni.cz/en/acknowledgements

Expires: 2023-02-28T18:00:00Z

-----BEGIN PGP SIGNATURE-----

iQFCBAEBCAAsFiEEP3bzyZnaEFl5AFtML8U9yxCqi+EFAmMVtncOHGFidXNlQGN1
bmkuY3oACgkQL8U9yxCqi+HuSgf/UvVWtY1KbOtsqUTpZrFIwoOTmg/b2N7yQrl5
78ZzCW41V9Hr6EnPeEX6+6UfdYXqK7W7jKjBkIHzhA2md4tBSdzlan+GfQcpgoip
KBgaESE3izlQSzI4QFxOcKS6rDIwOK3QnAepwQZ/9tsU5ZY7a68eWd8kOSIGdjbQ
q85iHrq/NXXrdLUSy+3HdRDljv+i3jm/j1+Q9zHZDoSG8qAfhBj+B0LXmcaKqiZd
hrgqZwASbGy5bmuiP6B28qwj0m/+7MroGf6JIgw9y+0TUzmfoIrUcQ8gNXENLV35
Playr7WiDGd67L6CNlU2dq8Rg/7i3GpvImxb1S7sAGh2Kf5qfg==
=XkEO
-----END PGP SIGNATURE-----