A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: security@au-fil-du.net
Preferred-Languages: en,fr
Canonical: https://au-fil-du.net/.well-known/security.txt
Encryption: https://au-fil-du.net/.well-known/openpgpkey/hu/87yz9kuesjc4u1boko8ogqttj6pzfk57
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEElUA/+15XtyGcVgKfAwVyRMgkE3EFAl09uacACgkQAwVyRMgk
E3G0kw/+PSxiAwEXlroGz2nasRHfG70KLQ0fRetWhRdlJRwExSbFUIGYBDCgrj6U
cdy5+KaFzE6jQnahmZADsG5RNkrWczCzyRzjtw92psRwSlabo/VQEQrU7lbRRIbK
KpMzSFyLx6HmAkpn+eCOkp27x10hywo2h9XnzD9Lwq51h3TSuBXjimsgNhvDyxdz
39ny8n+vC/F+ek/nftRFLngeR3TMB99krWgSU9jEtdUCh2WH6y46Mx0VF2U53/oz
7TtXXiYsvUWC5PM0UaUB2u7M5u/kwtOjK4PzSqmNqBqQCC7k2byRwnRVPrhmr6aD
xnQQ837DX9WuInDCDm8MxDA++taRSh0SUP2rZvErghpQQeRuOrUWzZ2pd9f39O6p
Rmoo3z009IZr9VaKjP3pGHfELeirLKWlTEOMwUZbvFpv8jZG+sHwkjXFDgvgkbe9
TAI5IPCaj1hNWDGsYd9kWr5uIGEnN2JV0HN1B3zycZoALTx1XfYOetNrBXJiWBh8
C17ug+3/oegj7HKw2mn/yVEMs8QiTrftRMYIoWcwyFr8kyW1j3MGJ509Wpk8AK1f
pmTxUes43fmUYpqsDWxx6bHV2ELxmN3ZgMu8NT9y7TDG2qtEQ+KYb8L84xoG5d1n
g4FsneYMKWmvwmd7pff40shaQu90Ig9lIK9RAHD8P/CLtDl38HY=
=8v9y
-----END PGP SIGNATURE-----