A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

# If you would like to report a security issue 
# you may report it to CERT LA POSTE
# Unless you have specific information about a Bug Bounty program regarding this site, our sites have, as a generic rule, no specific Bug Bounty program.
# Nevertheless, you still can reach us to make Internet safer
#
# Si vous voulez reporter un probl�me de s�curit�
# vous pouvez le faire aupr�s du CERT LA POSTE
# A moins que vous ne poss�diez des informations au sujet d'un programme de bug bounty sp�cifique � ce site, nos sites ne font, en r�gle g�n�rale, pas l'objet de programme de Bug Bounty
# N�anmoins, vous pouvez toujours nous contacter pour rendre Internet plus s�r
#
Contact: https://www.trusted-introducer.org/directory/teams/cert-la-poste.html