A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:webmaster@bougeret.fr
Encryption: https://www.bougeret.fr/.well-known/openpgpkey/hu/kd39y8fkyw5j8uubuicshffo9hhodk4j
Preferred-Languages: fr,en
Canonical: https://www.bougeret.fr/.well-known/security.txt
Expires: Thu, 31 Dec 2030 18:37:07 +0100
-----BEGIN PGP SIGNATURE-----
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=M9WA
-----END PGP SIGNATURE-----