A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@facil-iti.com
Expires: 2024-06-01T09:00:00.000Z
Encryption: https://www.facil-iti.com/.well-known/security-pgp-key.txt
Acknowledgments: https://www.facil-iti.com/responsible-vulnerability-disclosure-policy/#acknowledgments
Preferred-Languages: fr, en
Canonical: https://www.facil-iti.com/.well-known/security.txt
Policy: https://www.facil-iti.com/responsible-vulnerability-disclosure-policy/
-----BEGIN PGP SIGNATURE-----
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=aN7A
-----END PGP SIGNATURE-----