A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: http://french-biketours.com/.well-known/security.txt
Canonical: http://www.french-biketours.com/.well-known/security.txt
Canonical: http://service.intakt.com/securitytxt/generate.php?domain=french-biketours.com
Expires: 2027-03-01T10:19:25+00:00

# Please always try to contact us through our online form to speed up things.
Contact: https://www.intakt.com/security-en?lang=1
Contact: https://www.intakt.com/security
Contact: mailto:security@intakt.com

# This is the PGP public key that we use to sign our security.txt.
# Do *not* use it to send encrypted mails to us.
Encryption: dns:2591d67d64ef2e80cde67d27b6510e61eca0b5b7f220a30cbaf0bcf0._openpgpkey.sidnlabs.nl.

# We can offer a proper response in the following languages:
Preferred-Languages: nl, en

-----BEGIN PGP SIGNATURE-----
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=gMIi
-----END PGP SIGNATURE-----