A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@vsa.fr
Contact: https://vsa.fr/#Contacts
Expires: 2030-12-31T23:59:59.000Z
Encryption: https://vsa.fr/.well-known/pgp-key.txt
Preferred-Languages: en, fr
Canonical: https://vsa.fr/.well-known/security.txt
Canonical: https://www.services.vsa.fr/.well-known/security.txt
Canonical: https://services.vsa.fr/.well-known/security.txt
Canonical: https://assistance.vsa.fr/.well-known/security.txt
Policy: https://vsa.fr/disclosure-policy-en.html
Acknowledgments: https://vsa.fr/security-acknowledgments-en.html
-----BEGIN PGP SIGNATURE-----
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=jxiO
-----END PGP SIGNATURE-----