A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



# USAA Secure Vulnerability Disclosure 

Contact: https://bugcrowd.com/usaa/report

Contact: mailto:disclosure@usaa.com

Encryption: https://www.usaa.com/gpg_disclosure_public.txt

Acknowledgments: https://bugcrowd.com/usaa/hall-of-fame

Preferred-Languages: en

Canonical: https://www.usaa.com/.well-known/security.txt

Policy: https://bugcrowd.com/usaa

Hiring: https://www.usaajobs.com/search-jobs/information%20security/

-----BEGIN PGP SIGNATURE-----



iQFIBAEBCAAyFiEEEufUcCHWfmL4kdJ+W1517GQFJfcFAl5DFZ4UHGRpc2Nsb3N1

cmVAdXNhYS5jb20ACgkQW1517GQFJfe2qQf/W1R/kVSQCzXcBmeyDMlZVtdoyTfW

rXXMY+WlQDLiVNXEX+jJAJzL30zAf9THV7k6rtU9Z/eMlOOfs1aQpmP2vD2wUVsL

WuIwNX3yf0FT6r3lTPojdfe4+LAY2GwXU9hoBaISLslieNXa/EwtOPcNx8KGB9jR

yj+hPy2C2EZVe87TLgOUVEabhrL4rJx7us7K5rqrkqhzuykrfXQYeRBRrF/hevJe

BV5I2CBEEsUd0ObuqkTWbyP4HjaSgL12sSbm4zUEZjYMdfd7jtqd13C1mvN3wTU3

GVxMOHveeGADj3lM82RExPO9RiiUYNo9VO+uA8RjuDHnQIjDd81IIl2Jbw==

=CO2N

-----END PGP SIGNATURE-----