Security Txt

What is security.txt?

The security.txt file acts as a formal protocol, allowing organizations to define how to report security issues affecting their websites. It offers a quick and efficient way for security researchers to find the appropriate contact within an organization and understand the accepted reporting procedures.

Key Features

• Contact Information: Clearly define the method for reporting security issues.
• Expiration Date: Specify when the information in the security.txt file will be considered outdated.
• Encryption: Provide a URL to a public PGP key to enable secure communications.
• Acknowledgments: Include a link to a page that recognizes the contributions of security researchers.
• Policy: Direct users to your vulnerability disclosure policy with a URL.
• Hiring: If you’re hiring in the security field, include a link to your job listings.
• Signature: Add a digital signature for verification of the security.txt file.
• Preferred Languages: State which languages you prefer for security reports.
• Canonical: Checkbox indicating that the security.txt file is located in the site’s root directory.
• Additional Directives: Allows you to add custom directives not predefined in the plugin.