A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.
# To responsibly report security issues please reach out for an invite to our bug bounty program Contact: mailto:prodsec+bugbounty@iherb.com Acknowledgments: https://hackerone.com/iherb/hacktivity Preferred-Languages: en Canonical: https://www.iherb.com/.well-known/security.txt Canonical: https://www.iherb.com.com/security.txt Policy: https://hackerone.com/iherb Hiring: https://careers.iherb.com/ Expires: 2025-05-04T17:58:00.000Z
This policy crawled by Onyphe on the 2025-04-02 is sorted as securitytxt.
FireBounty © 2015-2025