A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.
Contact: mailto:infosec@man.com Preferred-Languages: en Encryption: https://www.man.com/security/pgp-key.txt Policy: https://www.man.com/security Acknowledgements: While Man Group does not have a formal bug bounty programme we are strong proponents of responsible disclosure and are open to external reports. We would be happy to hear about any vulnerability that you have uncovered on our corporate website.
This policy crawled by Onyphe on the 2023-12-01 is sorted as securitytxt.
FireBounty © 2015-2024