A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Allitude S.p.A.

Contact: mailto:itso@allitude.it
Contact: mailto:itso.cyber@allitude.it
Encryption: https://allitude.it/security-pgp-key.txt
Encryption: openpgp4fpr:DC7178F07C1BBA1BBC9668346505A95B05C65A7F
Preferred-Languages: en, it, fr
Canonical: https://allitude.it/.well-known/security.txt
Policy: https://allitude.it/disclosure-policy.html
-----BEGIN PGP SIGNATURE-----
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=H6NF
-----END PGP SIGNATURE-----