A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.
# oh hai! :3 # Please report any security issues as ZenDesk tickets - we welcome any reports. # ...that said - there's a LOT of vulnerabilities in the current website which I inherited and am fixing, day-by-day, page-by-page - but if you find any that I'm not aware of then PLEASE let me know! # Toodles! Contact: https://repairshopsolutions.zendesk.com/hc/en-us/requests/new Preferred-Languages: en
This policy crawled by Onyphe on the 2022-02-01 is sorted as securitytxt.
FireBounty © 2015-2024