A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://www.evaneos.com/.well-known/security.txt

Contact: mailto:security@evaneos.com

Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/158A4337FBC09D075A645B57F1EF3352DF5DB839

Policy: https://vdp.evaneos.com/

Preferred-Languages: en-US, fr-FR

Expires: 2024-12-31T20:30:07Z
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQQVikM3+8CdB1pkW1fx7zNS3124OQUCZh+JXgAKCRDx7zNS3124
OQ6gAP0aFohOp0+WUoMd+qk5iwMswvJ+QRcDe0zO/ddpdiZongEAr9pSgQAgLUID
yj+lJ99lQ5CxAX3/Cu38fmxDdEpO/AY=
=nRVj
-----END PGP SIGNATURE-----