A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.
# # SECURITY.TXT for BPCE # https://securitytxt.org/ # # If you would like to report a security issue # you may report it to CERT Groupe BPCE Contact: mailto:cert@bpce.fr Expires: 2025-12-31T22:59:00.000Z Encryption: https://openpgp.circl.lu/pks/lookup?search=0x4FBDF286&fingerprint=on&op=index Encryption: openpgp4fpr:3D88CEA3577EC510E55334638563A2F34FBDF286 Preferred-Languages: en, fr
This policy crawled by Onyphe on the 2025-05-05 is sorted as securitytxt.
FireBounty © 2015-2025