The main purpose of security.txt is to help make things easier for companies and security researchers when trying to secure platforms. Thanks to security.txt, security researchers can easily get in touch with companies about security issues.

The security.txt file is going to be placed under the /.well-known/ path (/.well-known/security.txt) [RFC5785].

Author: Gianluca Varisco

security.txt

@@ -0,0 +1,5 @@
+Contact: mailto:[email protected]
+Encryption: https://raw.githubusercontent.com/arduino/arduino-cvd-policy/master/security_at_arduino_cc-pub.asc
+Preferred-Languages: en
+Canonical: https://www.arduino.cc/.well-known/security.txt
+Policy: https://www.arduino.cc/en/Main/Security