security-txt

This plugin creates a security.txt file in the WordPress installation root.

You can edit/add to this file within the WordPress SecurityTXT settings page.

The purpose of the security.txt file is to allow users to properly disclose security vulnerabilities or bugs to you.

The security.txt file is currently a draft « standard ». This file is similar to the robots.txt file but for security. Large companies have already started to adopt this standard including Google, Facebook, GitHub, just to name a few.

We welcome development to make this plugin even better! Create your pull request or submit a bug here.