A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.
# If you would like to report a security issue, you may report it to us # according to this security.txt file. This file is created according to # security.txt standard 04. # https://tools.ietf.org/html/draft-foudil-securitytxt-04 Contact: mailto:javier@poremski.se Encryption: https://www.poremski.se/pgp_key.asc Signature: https://www.poremski.se/.well-known/security.txt.sig Acknowledgements: https://www.poremski.se/.well-known/acknowledgements.txt
This policy crawled by Onyphe on the 2021-05-07 is sorted as securitytxt.
FireBounty © 2015-2024