A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Our security address
Contact: mailto:abuse@cuni.cz
Contact: https://csirt.cuni.cz/en/contact

# Our OpenPGP key
Encryption: https://csirt.cuni.cz/en/publickey.asc
Encryption: https://keys.openpgp.org/search?q=3F76F3C999DA105979005B4C2FC53DCB10AA8BE1

# Our security policy
Policy: https://csirt.cuni.cz/en/incident_reporting

# Out security acknowledgments page
Acknowledgments: https://csirt.cuni.cz/en/acknowledgements

Expires: 2026-08-30T18:00:00Z

-----BEGIN PGP SIGNATURE-----

iQFCBAEBCAAsFiEEP3bzyZnaEFl5AFtML8U9yxCqi+EFAmmXIvcOHGFidXNlQGN1
bmkuY3oACgkQL8U9yxCqi+HDBggAg+bfjmlMINe3gJ0VfF20CiMSjrBoM6ZbezvV
g66uZSOeg/QbR/AmTXfdDXT61H9Zp3MP4LwEIyRCdoVZXOCqMh9NBHRxdDIgsClL
Bc2AcbSOegOHOH8uKv6EIW2CDatDw8DK43zh4ofPBAattvrvIBROl7fBsWZC0aii
TOajZidrF/6OwxZiOQXi5QSUSoiLjFQ6Qouno9FWs8QwIcIBr26PWy6txjwwZ+pE
YBh938eTReJmVovrliCiX/0qKfpMO2Wd1TvjksLyCibG6AxVBhmI40o8VnEdgUl6
b/6UgNqjs0Zi+qqakPsxaJpJATnsJvvX5iNosFBqKiCuO/6YLw==
=yeWh
-----END PGP SIGNATURE-----