A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Canonical: https://prn.ovh/.well-known/security.txt
Contact: mailto:j@prn.ovh
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/D6E3AF0E426243BFCB26FB22C7F4F1918A9D27A2
Expires: 2045-12-30T22:00:02+00:00
Preferred-Languages: fr, en
-----BEGIN PGP SIGNATURE-----
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=LYPC
-----END PGP SIGNATURE-----