Tutorial: Configuring the SecurityTxt file

You can use the security.txt file to provide your users with a standard way to report security vulnerabilities with your site.

The security.txt file is a file format that is designed to help your users disclose any security vulnerability. For more information, see securitytxt.org or A File Format to Aid in Security Vulnerability Disclosure.

Before you begin

You must have a Developer Portal enabled, and you must have administrator access to complete this tutorial.

About this tutorial

You edit the security.txt file and provide information such as a URL of a contact page, for your customers to use if they have a security vulnerability.

  1. Log in to your Developer Portal as an administrator.
  2. If the administrator dashboard isn’t displayed, click Manage to display it.
  3. Navigate to Configuration > System > Security.txt.

    Show security.txt

  4. Select the checkbox for Enable the security text file for your site.
  5. Complete the form for your requirements.
  6. Click Save Configuration to save your changes.

What you did in this tutorial

You successfully customized the security.txt file.

What to do next

You can edit the security.txt at any time by navigating back to the page within the configuration settings.