A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.
# "what is who is information", "another dumb text file" # signed 9 May 2022 by postmaster@localhost Contact: mailto:security@irc.frl Expires: 2023-09-10T13:37:00.000Z
This policy crawled by Onyphe on the 2026-02-01 is sorted as securitytxt.
FireBounty © 2015-2026