generated: '2026-07-22'
method: searched
probe: true
source: well-known/deutsche-boerse-security.txt + https://www.deutsche-boerse.com/dbg-en/our-company/contact/report-vulnerabilities
policy:
- https://www.deutsche-boerse.com/dbg-en/our-company/contact/report-vulnerabilities
contact:
- mailto:vulnerabilitydisclosure@deutsche-boerse.com
notes: RFC 9116 security.txt on www.deutsche-boerse.com links the "Report
  Vulnerabilities" VDP policy and Hall of Fame page (verified HTTP 200 on
  2026-07-22). The security.txt Expires field (2025-04-22) is stale but the file
  and policy page remain live. Preferred languages en, de.
evidence:
- source: well-known/deutsche-boerse-security.txt
  kind: security.txt (harvested 2026-07-22, HTTP 200)
- source: https://www.deutsche-boerse.com/dbg-en/our-company/contact/report-vulnerabilities
  kind: vulnerability disclosure policy + hall of fame page (HTTP 200)