A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Our contact address
Contact: mailto:security@toleressea.fr?subject=sec-warn_toleressea.fr
# OpenPGP key
Encryption: https://toleressea.fr/.well-known/pgp-pub-key.asc
# Canonical URL:
Canonical: https://toleressea.fr/.well-known/security.txt
# Security policy
Prefered-Languages: fr, en
Expires: Tue 27 Apr 2027 12:27:08 +0200
-----BEGIN PGP SIGNATURE-----

iQGzBAEBCgAdFiEEtYaTFZ5PuginBDsOy6Q34efrx4wFAmJqbJEACgkQy6Q34efr
x4zfjQv9EaFgT9rCkcnRD6avmeGtCfsIcXfwxStNP5BTPtINaNpcDC4XQSZM+6ak
syI6JQqc7jgZPQJK09ZojmzVPhLKPmPbwGJa2jtX1CjlJJP00MhnzFHhcWa0RcB1
fPpp9P3u++6y1tVvQbNnnvR8zE1CiLZCpZuOMXNfQsJv4jfCvrSvZyHyW61sLtEF
rg3ScZ9EbAmKHJbHKfBbVQtrzvFRqUggnCZZwrApC3khD4d/tfBu3N/2bz7FA7kI
dS4XLaWzsbL5ERlUYwA0cqzmZojzRJCSRnwmP5LThFsqSQ/omEZveyoX/haudpjQ
NmuaeXMbIjLCT/fIqiKle/oZM+Buwjiw1eqjfxmrLsVKjPefftSvt5BlQ+JSzbyE
yYbSgRRJ6Gd2+2dxMjFj6OLxvPCEDC4Bjrb84bWe/kzAilc4lARIZjTrd9lLAulO
cUoVwzYS7ZOyjZ3jBrAQyheYwY95Gqrug+osaXKmdaOZHWuyzHJ1JiMjm9YETyYl
T9DFu/Vq
=0itG
-----END PGP SIGNATURE-----