A File Format to Aid in Security Vulnerability Disclosure
Edwin Foudil, Yakov Shafranovich · 2022
When security vulnerabilities are discovered by researchers, proper reporting channels are often lacking. As a result, vulnerabilities may be left unreported. This document defines a format (security.txt) to help organizations describe their vulnerability disclosure practices to make it easier for researchers to report vulnerabilities.