A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

# Information related to reporting security vulnerabilities of this site.

# How to communicate about security issues.
Contact: mailto:security@borrowell.com

# Link to a key for secure communication.
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/CCAC6DF3724A52779BE35CA913834100CCB85C28

# Acknowledgements

# Preferred languages for communication.
Preferred-Languages: en, fr

# The most common URL for accessing this security.txt file.
Canonical: https://borrowell.com/.well-known/security.txt

# Policy

# Hiring

# Please see https://securitytxt.org/ for details of the specification of this file.