A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://www.vivam.info/.well-known/security.txt
Contact: mailto:security@vivam.info
Expires: 2030-01-01T00:00:00Z
Preferred-Languages: fr,en
Encryption: https://www.vivam.info/.well-known/sec-gpg-key.asc

-----BEGIN PGP SIGNATURE-----
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=AE6D
-----END PGP SIGNATURE-----