A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:contact@samsepi0l.dev
Expires: 2026-02-19T23:00:00.000Z
Encryption: https://samsepi0l.dev/pub-key.txt
Preferred-Languages: fr, en
Canonical: https://samsepi0l.dev/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQTogFi4p/GtNCxpie4h5Zniq5Ap9wUCZ7bvEQAKCRAh5Zniq5Ap
9xtpAP9iNiH+uOtgeKo4qthrHRi/85M3JssQhdupQfL5vhWhcwD/VL1gnhhBy/rS
l9QHgDEQxm9zWyewM7JBeVWr/i1+cAo=
=4Lkr
-----END PGP SIGNATURE-----