Adds SECURITY.md file

Provides information for security researchers to responsibly disclose vulnerabilities. SecureDrop Workstation will be in scope of our Bugcrowd programme at a later date.
freedomofpress · Jan 2, 2020 · fa5edff · fa5edff
1 parent 59de020
commit fa5edff
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,7 @@
+# Reporting security issues
+
+### Reporting a Vulnerability
+
+If you have found a vulnerability, please **DO NOT** file a public issue. Please send us your report privately either via:
+
+- Email to [email protected] (Optionally GPG-encrypted to [734F6E707434ECA6C007E1AE82BD6C9616DABB79](https://securedrop.org/documents/6/fpf-email.asc))