A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.
# Our Security Adress Contact: mailto:voc@carrefour.com # Our OpenPGP key Encryption: /.well-known/security-carrefour-pubkey-24112023.txt # Expiration Expires: 2025-01-15T19:13:00.000Z # Languages Preferred-Languages: en,fr
This policy crawled by Onyphe on the 2023-12-02 is sorted as securitytxt.
FireBounty © 2015-2025