A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.
# Our security address Contact: mailto:cert@axa.com # Our OpenPGP key Encryption: https://cert.axa/sources/AXA-CERT-pubkey.asc Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/3C3E08E3FDC81473CD4BDCE6B2A5A31D676D7D05 # Our security policy / documentation Policy: https://cert.axa/ Preferred-Languages: fr,en Hiring: https://recrutement.axa.fr/nos-offres-emploi?keyword=sécurité
This policy crawled by Onyphe on the 2025-03-14 is sorted as securitytxt.
FireBounty © 2015-2025