A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Canonical: https://y0no.fr/.well-known/security.txt
Contact: mailto:security@y0no.fr
Encryption: https://y0no.fr/key.gpg
Preferred-Languages: en, fr
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEXkHFMnTc5R76NiyQf9oYRlpR1lwFAl6lV9AACgkQf9oYRlpR
1lxomAf+JED8j+HNMaVqI3XbN1SW98gs1oiGU+YXy3dm6Iy+TWz0fzFrKmWtPBHz
tWsKjc7CWLNuXk7AH8t/cgUxZVSi9cVm2nDcu7k6dvak1LY7ZVlo0NPLzWX8g2S9
eP6ds28i+fvDE7OE+ckN0Tn/lF8t+OeWGwUZOFju70uMCw9otacLdiRqEZYjWYlU
gCHgnuF0qB9IB8BWMaYHQN1/hYUFJ/0qeVEhUscmlD4r6smaFebAeEgKOGssx4Wo
8IJG1z3rJgDtOLKF21jI204h1HkNf0GLD0/zwOK6MAK2y+SMBcMFtEYVym/5ryfL
uYznY/ktbBkd0VJTq7oSAcEXGMGu8w==
=pPq7
-----END PGP SIGNATURE-----