A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Contact: mailto:corti@ethz.ch Expires: 2050-01-01T11:00:00.000Z Preferred-Languages: en, de, fr, it Canonical: https://matteo.ethz.ch/.well-known/security.txt Encryption: https://corti.li/files/matteo_at_corti_li.gpg -----BEGIN PGP SIGNATURE----- iF0EARECAB0WIQRa8T5dtd6jq19f59csQb9PSCCAmwUCZAtjrQAKCRAsQb9PSCCA m8AOAKDJJy3fFK8fckDS7JVNtXgE/K1o3wCg0d2oIvhEFKy7CnzLS7tO5iCW4OM= =UZJ7 -----END PGP SIGNATURE-----
This policy crawled by Onyphe on the 2025-04-04 is sorted as securitytxt.
FireBounty © 2015-2025