A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@pants-on.net

# OpenPGP
Encryption: https://bertrand.jacquin.bzh/gpg/0xA3B5C016618D9AAA.txt
Encryption: https://jacquin.bzh/.well-known/openpgpkey/hu/q3d58hg6ftxoj8395bwd5jcsyfusjpeu
Encryption: dns:27bceccd1f06d8ab27bf9e59c0576a40cfc413742fe026267b833081._openpgpkey.jacquin.bzh?type=OPENPGPKEY
Encryption: openpgp4fpr:27bceccd1f06d8ab27bf9e59c0576a40cfc413742fe026267b833081

Preferred-Languages: en

Expires: 2024-12-31T22:41:10Z
-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQSg5iBnnersLYwElb5VNIcfLi6T2gUCZu9BYAAKCRBVNIcfLi6T
2onyAP90M0aYg50v4zhkLxXmuiSvzyrNSYLfSLiOU+EG+QQFvQD/dMsl8a0MLAeQ
17VHJ4i+QymqWcQTgdwH82Cj2xFeOwM=
=c1xe
-----END PGP SIGNATURE-----