A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

# ---------------------------------------------
# Security is our first priority, don't hesitate sending us any question or information you have.
# WE PAY BUG BOUNTY!
# ---------------------------------------------

Contact: mailto:support@walla.net.il
Preferred-Languages: en, he
Canonical: https://www.walla.co.il/.well-known/security.txt
Policy: https://dcx.walla.co.il/walla/terms/terms.pdf

# ---------------------------------------------
# Hall of Fame:
# ---------------------------------------------
# 
# Ran Bar-Zik, Unvalidated redirects and forwards
# Gaurav Kumar, tmcw.official[@]gmail[.]com, mail.walla.co.il XSS
# Ron Masas, ronmasas[@]gmail[.]com, api-mail.walla.co.il Stored XSS
# Patrik Fabian, patrik[@]websafe[.]hu, Public IP SQL Injection
#
# ---------------------------------------------