Merge pull request #4994 from freedomofpress/4468-security-md

Add SECURITY.md
freedomofpress · Nov 18, 2019 · ed014be · ed014be
2 parents eead2ee + 67a8662
commit ed014be
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,8 @@
+# Reporting security issues
+
+### Reporting a Vulnerability
+
+If you have found a vulnerability, please **DO NOT** file a public issue. Please send us your report privately either via:
+
+- SecureDrop's public bug bounty program managed by [Bugcrowd](https://bugcrowd.com/freedomofpress)
+- Email to [email protected] (Optionally GPG-encrypted to [734F6E707434ECA6C007E1AE82BD6C9616DABB79](https://securedrop.org/documents/6/fpf-email.asc))