A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

&#*****(&                                   
                         ,*****************************(                        
                    #************#(           *,************/                   
                %*********                             /********/               
             /*******%                 #*/                 (********            
           *******                    *****                    *******(         
        /*******                     *******                     .******/       
       ******                      &*********(                      ******      
     ******,                   %*****************#                   .******    
    ******                      *****************                      ******   
   *****/                       *****************                       /*****  
  ******            ****        #****************        ****            /***** 
 /*****    ****************/    *****************.   (****************    *****/
 *****.      *******************************************************      %*****
 *****        @***************************************************,        *****
#*****         ***************************************************         *****
%*****       ******************************************************(       *****
 *****             #*****************************************(             *****
 *****/               (************************************               ******
 ,*****             %***************************************/             *****,
  (*****           *******************************************           *****( 
   /*****          /******************************************          *****/  
    ******(       (***************     ***     ***************(       /*****(   
      ******.    /**/(   ****(         ***         /****   */**/     ******     
        ******                         ***                         ******,      
         .******/                      ***                      /******.        
            *******/                   ***                   /*******           
               ********(              ,***               (********              
                  (**********%        ***/         (**********%                 
                      .******************   **************                      
                             (***********   ******/                             
                                      /*                                       


Contact: mailto:VulnerabilityManagement@aircanada.ca
Contact: https://www.aircanada.com/ca/en/aco/home/fly/customer-support/vulnerability-disclosure-program.html#/
Expires: 2026-01-01T05:00:00.000Z
Preferred-Languages: en,fr
Canonical: https://aircanada.ca/.well-known/security.txt
Policy: https://www.aircanada.com/ca/en/aco/home/fly/customer-support/vulnerability-disclosure-program.html#/
Hiring: https://careers.aircanada.com/