A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://www.evaneos.com/.well-known/security.txt

Contact: mailto:security@evaneos.com

Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/8A57D6A11863440E61C435C11C5AC85A8857CE43

Policy: https://vdp.evaneos.com/

Preferred-Languages: en-US, fr-FR

Expires: 2026-01-15T12:30:07Z
-----BEGIN PGP SIGNATURE-----
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=u4//
-----END PGP SIGNATURE-----