A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@facil-iti.com

Expires: 2027-09-18T09:00:00.000Z

Encryption: https://www.facil-iti.com/.well-known/security@facil-iti.com.gpg.pub.asc

Acknowledgments: https://www.facil-iti.com/responsible-vulnerability-disclosure-policy/#acknowledgments

Preferred-Languages: fr, en

Canonical: https://www.facil-iti.com/.well-known/security.txt

Policy: https://www.facil-iti.com/responsible-vulnerability-disclosure-policy/
-----BEGIN PGP SIGNATURE-----
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=dKVy
-----END PGP SIGNATURE-----