What Is a Security.txt File and How Can It Help Your Security Program?

This document explains the purpose, benefits, and setup steps for a security.txt file—an authoritative, machine-readable location for an organization’s vulnerability disclosure policy and contact information (published at /.well-known/security.txt). It covers why security.txt helps vulnerability disclosure programs, when to use contact vs. policy fields, and notes HackerOne services that can generate and host security.txt files for customers.