This project migrated to https://gitlab.com/unebraska/uitss-public/securitytxt

securitytxt

Description

A security.txt file is a standard file that organizations can include on their website to provide information on how to report security vulnerabilities or issues related to their website or services. The purpose of the security.txt file is to make it easier for security researchers and other concerned parties to report security issues to the organization.

Deploying a security.txt is mentioned in CISA Cybersecurity Performance Goals, section 5.1 and is part of NIST SP 800-53 Rev. 4 controls (RA-5).

More info at securitytxt.org.

In this repository, we'll provide a basic security.txt file that you can use directly on your sites or as a reference.