A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@root-me.org
Policy: https://www.root-me.org/tos
Acknowledgments: https://www.root-me.org/fr/Informations/Faiblesses-Decouvertes/
Preferred-Languages: fr, en
Canonical: https://www.root-me.org/.well-known/security.txt
Canonical: https://www.root-me.org/security.txt
Encryption: https://www.root-me.org/pgp-key.txt
-----BEGIN PGP SIGNATURE-----
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=pTij
-----END PGP SIGNATURE-----