What is security.txt
A machine-readable file that tells security researchers how to report vulnerabilities. Without it, researchers may not know how to reach your security team.
Required fields
- Contact — email or URL for reporting security issues
- Expires — date after which the file is stale
Optional fields
Encryption, Acknowledgments, Preferred-Languages, Canonical, Policy, Hiring