Add SECURITY.md

freedomofpress · Nov 18, 2019 · 67a8662 · 67a8662
1 parent d9d6699
commit 67a8662
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,8 @@
+# Reporting security issues
+
+### Reporting a Vulnerability
+
+If you have found a vulnerability, please **DO NOT** file a public issue. Please send us your report privately either via:
+
+- SecureDrop's public bug bounty program managed by [Bugcrowd](https://bugcrowd.com/freedomofpress)
+- Email to [email protected] (Optionally GPG-encrypted to [734F6E707434ECA6C007E1AE82BD6C9616DABB79](https://securedrop.org/documents/6/fpf-email.asc))