A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

# ███████████████████████████████████████████████████████████████████████████████████████████████████████
# █▄─▄▄─█▄─▄▄─█▄─▀█▄─▄█─▄─▄─█▄─▄▄─█─▄▄▄▄█─▄─▄─█▀▀▀▀▀██─▄─▄─█─▄▄─█─▄▄─█▄─▄███─▄▄▄▄█████─▄▄▄─█─▄▄─█▄─▀█▀─▄█
# ██─▄▄▄██─▄█▀██─█▄▀─████─████─▄█▀█▄▄▄▄─███─████████████─███─██─█─██─██─██▀█▄▄▄▄─█░░██─███▀█─██─██─█▄█─██
# ▀▄▄▄▀▀▀▄▄▄▄▄▀▄▄▄▀▀▄▄▀▀▄▄▄▀▀▄▄▄▄▄▀▄▄▄▄▄▀▀▄▄▄▀▀▀▀▀▀▀▀▀▀▄▄▄▀▀▄▄▄▄▀▄▄▄▄▀▄▄▄▄▄▀▄▄▄▄▄▀▄▄▀▀▄▄▄▄▄▀▄▄▄▄▀▄▄▄▀▄▄▄▀
#
# Everything can be improved. Thanks for your help! We appreciate it!

# Meta
Canonical: https://pentest-tools.com/.well-known/security.txt

# Reporting
Contact: mailto:security@pentest-tools.com
Expires: 2022-12-31T21:59:00.000Z
Preferred-Languages: en, ro

# Scope
In-scope: *.pentest-tools.com
Out-of-scope: support.pentest-tools.com

# Useful links
Hiring: https://pentest-tools.com/jobs

# Based on https://securitytxt.org/