An RFC that helps organisations define security policies by @EdOverflow & @nightwatchcyber. 👉 https://xitter.cf/t.co/KktAVPg8PH 📖 https://xitter.cf/t.co/LVpnsiLQNZ
/.well-known/
Joined November 2015
- Tweets211
- Following19
- Followers2.7K
- Likes190
security.txt (RFC 9116) retweeted
🚨 BREAKING 🚨
Our @securitytxt 2024 version is updated containing a new CTF-like challenge. Check it out now: swisscom.ch/.well-known/secu…
security.txt (RFC 9116) retweeted
This is probably the best public Vulnerability Disclosure Program terms I've ever seen. It demonstrates the exact nature of a VDP, "see something, say something" no more, no less. +10 for hosting a @securitytxt file too. Nice work @ServiceNow 👏
🇯🇵
JPCERT/CC Eyes「RFC 9116「security.txt」の紹介（2022年8月）の続報」を公開。RFC 9116のおかげで開発者との脆弱性関連情報のコーディネーション（調整）が大変スムーズにできた事例と、「security.txt」の紹介記事についてご紹介します。^KI
blogs.jpcert.or.jp/ja/2023/1…
security.txt (RFC 9116) retweeted
Looking for a little project to keep you busy on the weekend? I was just thinking: how many of the breached websites in @haveibeenpwned now have a security.txt file? So, if you feel like grabbing those domains and querying them all, there's an API here: haveibeenpwned.com/API/v3#Al…
security.txt (RFC 9116) retweeted
Switzerland's largest retail company @migros published their vulnerability disclosure policy via @securitytxt 🥳
security.txt (RFC 9116) retweeted
This is great: having a security.txt file is now mandatory for Dutch government websites. They either need to apply this as a standard or provide a good justification for why they're not using it ("Apply of Explain") digitaltrustcenter.nl/nieuws…
security.txt (RFC 9116) retweeted
security.txt 📑 has been added to the 'Comply or Explain' list of the Netherlands Standardisation Forum. This means that Dutch municipalities, provinces, the state, water boards and all operational organisations are obliged to apply this open standard.✅forumstandaardisatie.nl/nieu…
Bridge the gap between your website and security researchers. ✅ Implement security.txt and promote coordinated vulnerability disclosure.
Need help getting started?
➡️ Head on over to securitytxt.org/.
#securitytxt #cybersecurity
security.txt (RFC 9116) retweeted
@securitytxt nice recommendation for security.txt in this @CISAgov advisory cisa.gov/news-events/cyberse…
security.txt (RFC 9116) retweeted
Can you spare an hour to help us improve rfc-editor.org (the official home of RFCs)? If you’ve used RFCs for work, school or research, we’d love to learn from you - particularly if you're new here! Volunteer by answering a few quick questions: docs.google.com/forms/d/e/1F…
security.txt (RFC 9116) retweeted
A tale of Google dorks finding subdomain takeovers plus why having a security.txt & a responsive security team are good news all round. London Councils & pirate books. Google dorking for subdomain takeovers. Thanks to our @OPSEC_failed
pentestpartners.com/security…
#cybersecuritytips
security.txt (RFC 9116) retweeted
Check out the just released fresh version of Internet.nl with improved tests for CSP and security.txt, en.internet.nl/article/relea…
Happy testing and improving!
#moderninternet
ALT Screenshot news item Internet.nl
🇫🇮 Shout-out to @oh2fih who wrote their Master's thesis on security.txt adoption on .fi domains.
theseus.fi/handle/10024/7921…
@oh2fih also wrote a Bash helper script to generate RFC 9116-compliant security.txt files.
github.com/oh2fih/securitytx…
Where did you first hear about security.txt?
68%Twitter
6%GitHub
8%Conference talk
19%Other (comment below 👇)
167 votes • Final results security.txt (RFC 9116) retweeted
What can we say, twitter-driven development sometimes works :)
netflix.com/.well-known/secu…
Ya'll are good folks. Keep it going!
Thank you for the shout-out on your recent podcast episode, @patchstackapp! 🙌
patchstack.com/articles/patc…
