A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@cozycloud.cc
Encryption: https://cozy.io/.well-known/pgp-key.txt
Preferred-Languages: fr, en
Canonical: https://cozy.io/.well-known/security.txt
Expires: 2025-08-17T09:00:00.000Z
-----BEGIN PGP SIGNATURE-----
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=9xtI
-----END PGP SIGNATURE-----