A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://6jf.be/.well-known/security.txt
Contact: mailto:jean-marc@6jf.be
Encryption: https://6jf.be/keys/ED863AD1.txt
Preferred-Languages: fr, en, nl
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEEWjgcRC0dCXkfm9hQHHLXC3pxPwFAl8r1eYACgkQQHHLXC3p
xPx/sg//eNVktD0upXy5xCjGCOZJ/+mQO3RrtOaenlbnvR9RKW/7Es6emvnaxJ0E
DU3dEEYYU9aeHlTlYnouKoo3+VAChtSEZo/Agoprz1kcZtX6qxq9yj/hN9aME5xd
LUUDfmlieafZh/l65dS6WWHUv7RqS1oWQ3kKBa4U9ZPu7g4/MlPdoGF2yO9R591R
YtHPJsbwg6iQC74nUIsfKQz4UhoImPBR1S6b/MLOQX9XKuqZqyr356gAMrHTAzGr
y9p/xFjT/6OC/s1ZBfODjXqzcg81yfnqYhrC7aOaubIFDc6Y7SXtlV2rnYoAAe+1
z7CEwpcVXAXWClV9e5JaSGnPINSLSDX9kFbOawWowU+uewlM/GvNj6zJY85xoAXg
ylqAwnewtqY4Nexg4/ih5h+FiYbnvc7KXbcNhRHu92GTyDYx8j4qHesIu0gFZuII
8PBDLJLeruAP5axaTSKxLhKoceMYkjAjSdyyknaNVR/eRfmXh9qXccJuCtNhMihA
tEzFMD0uRsSMTSSWugpoCTFH9fR0tmm3K6frLfNSlHHUf5j4/U+Ofj+N9FYSIR5T
1OHSJdNwNyDwFl/EfSgAZVd+jsjsxfh+v+Fce1MqKx8g2uQ9UNcEWmVv4hwGQVRr
Lk4W97szkFBHjxhQkP/Ilrbsm9EHhqN1GRrjHHrbqb7Hps5Aqs0=
=vbjq
-----END PGP SIGNATURE-----