A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:mathieu_g1@protonmail.com
Expires: 2024-09-09T06:00:00.000Z
Encryption: https://connectemoi.eu/publickey.mathieu_g1\@protonmail.com.asc
Preferred-Languages: fr,en
Canonical: https://connectemoi.eu/security.txt
-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQQFZJFolkSjtfNvm7il5evuJ03A6wUCZT0Q8AAKCRCl5evuJ03A
67xvAP96SB5hEllxp7q29Wn2+WmgAYeGzKpE4KdELJIWDLQYcAD9F+7opdbVgC9r
LQxdS/TYpky8HDtW/XLZDSOEoQIzIwQ=
=hrXo
-----END PGP SIGNATURE-----