A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

# ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
# ██░▄▄▄░██░███░██░▄▄░██░██░██░▄▄▄██░▄▄▀█████░▄▄▄██░██░██
# ██▄▄▄▀▀██▄▀▀▀▄██░▀▀░██░▄▄░██░▄▄▄██░▀▀▄█▀▀██░▄▄▄██░██░██
# ██░▀▀▀░████░████░█████░██░██░▀▀▀██░██░█▄▄██░▀▀▀██▄▀▀▄██
# ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
#
# Information Security & Privacy Management Integrated Software
#
# Let he who has a bug free software cast the first stone.
#

# Meta
Canonical: https://www.sypher.eu/.well-known/security.txt

# Reporting
Contact: mailto:infosec@sypher.eu
Expires: 2024-12-30T22:00:00.000Z
Preferred-Languages: en, ro

# Scope
In-scope: *.sypher.eu

# Useful links
Hiring: https://www.sypher.eu/careers

# Based on https://securitytxt.org/