A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.
# Security Contact Information for Kargoship # As per RFC 9116 - https://www.rfc-editor.org/rfc/rfc9116.html # Contact email Contact: mailto:info@kargoship.com # HTTPS link to security policy Policy: https://kargoship.io/security-policy # Preferred languages Preferred-Languages: en # Encryption key for secure communication Encryption: https://kargoship.io/pgp-key.txt # Expires in one year from creation Expires: 2025-03-16T12:00:00.000Z
This policy crawled by Onyphe on the 2025-09-15 is sorted as securitytxt.
FireBounty © 2015-2025