Skip to content

Glossary: Vulnerability, Asset and Change Management

security.txt

Also written: RFC 9116, /.well-known/security.txt

A file at /.well-known/security.txt (RFC 9116) that tells researchers where to report flaws. Kettle & Crane's points to security@kettleandcrane.com.

Where the book teaches it

Related terms

Responsible disclosureBug bounty