A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@lesfurets.com
Encryption: https://www.lesfurets.com/nous-contacter/54D61B98.asc
Preferred-Languages: en,fr
Canonical: https://www.lesfurets.com/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----

iQFLBAEBCAA1FiEE+gs88KVZF5Ad5DCCLmVKS1TWG5gFAlyJGmkXHHNlY3VyaXR5
QGxlc2Z1cmV0cy5jb20ACgkQLmVKS1TWG5j8kAgAjD+h0EqaaF9L0OysGHeKnFLz
Jo/WWwTzuWH2j/xZX/6gylK5lFyN1i3SbetM7P/KQXbb9WIIgEb0ko8st6MnFnB3
f7Dsbe0jsDzDXxE1FHMxh0P+uYAcwFIVNSc/Pw+Ku6yFoJQDYoXTy56h07DVgVLR
YzFVgFe+Z/VWKOaSupr+T4EKbg1Rr/tfkvFVt8YjdjMH0lBvZAVlLh2/BJ/193no
NsSY4rxvQX+RhJZIT3k7aOKgRLedlR3gbY9F4b4KFT7jkitZLvQSAt+G4JpPR9hQ
qw85vG3tqFHn4o2ASN3ijW5bnl4K7hoHowKbKS1Lwsyl8Zbr3EdhzxxP/hWofg==
=Ljor
-----END PGP SIGNATURE-----