A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



# USAA Secure Vulnerability Disclosure 

Contact: https://bugcrowd.com/engagements/usaa

Contact: mailto:disclosure@usaa.com

Encryption: https://www.usaa.com/gpg_disclosure_public.txt

Expires: 2025-12-31

Acknowledgments: https://bugcrowd.com/engagements/usaa/hall_of_fames

Preferred-Languages: en

Canonical: https://www.usaa.com/.well-known/security.txt

Policy: https://bugcrowd.com/usaa

Hiring: https://www.usaajobs.com/search-jobs/information%20security/

-----BEGIN PGP SIGNATURE-----



iQEzBAEBCAAdFiEEKtZ6jIBkZf1ejGQI1mts17WbKlUFAmiTh4oACgkQ1mts17Wb

KlWA6Af+JIj87Sp8ZxltJCW2P1Au2IwhrDTeWaFRZWhbA7qmsG/EYaagWBE22s0i

XPtbr6SQsDQy1Qy6MfTBoKSoZ6RfIzcze2P7JK/bWhD+I5Fom8Ft6PIMDwOQvYvH

DjC8y+s7zMueX+nWkTqmrBGKU/PTga+eFKbAOz72oSrvwoeXjxBGRw5Rud8AiiXD

Mpr5BpKaJGDBpOOFDGd9Ndgjbp4qo5i/wOM5JMzRAuDlDppZqdwZX/ETQzA7rk7y

joILhSVXRO7Yq2RAuBJXhzltDSqrpcj6sahnmlaih4scy3uThxpyID9+fMCTNpK+

ncGOuyQsUZKnwuio4VaFRkFjI2CMJg==

=Ty+o

-----END PGP SIGNATURE-----