A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

Contact: mailto:security@lengow.com
Expires: 2023-09-08T05:49:00.000Z
Encryption: https://my.lengow.io/.well-known/publickey.txt
Preferred-Languages: en, fr
Canonical: https://my.lengow.io/.well-known/security.txt

# Bug Bounty / Reward Statement
# -----------------------------
# Lengow does not have a bug bounty/reward program and will therefore not offer paid bug/security rewards.
# We might however offer a token of our appreciation to security researchers who take the time and effort to 
# investigate and report security vulnerabilities to us.
#
# Best regards
# Lengow Security Team