BugsBounty lion shieldBugsBounty.com

[ DB ] — Program directory · security.txt

Programs that publish a security.txt file.

security.txt (RFC 9116) is a small file at /.well-known/security.txt that tells researchers where and how to report a vulnerability.

What is security.txt?

A standard file (RFC 9116) placed at /.well-known/security.txt that lists an organisation's security contact, policy and preferred languages. 59 programs currently match.

security.txt · 59 programs

59 shown

Data from the disclose.io open database (CC0 public domain), snapshot November 2026. A dash means the program hasn't stated it. Policies change — always read a program's own policy and scope before testing.

[ FAQ ] — Questions people ask

Should my organisation publish security.txt?

+

Yes. It is free, takes minutes, and makes sure reports reach the right people instead of a general inbox.

Browse A–Z

0–9ABCDEFGHIJKLMNOPQRSTUVWXYZ

Browse by what matters