A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:technology@sezane.com
Preferred-Languages: fr, en
Encryption: https://www.sezane.com/.well_known/pgp.txt
Canonical: https://www.sezane.com/.well_known/security.txt
Expires: Fri, 31 Dec 2021 23:59:59 +0100
-----BEGIN PGP SIGNATURE-----
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=5dN3
-----END PGP SIGNATURE-----