The billion-dollar security.txt problem(sansec.io)
sansec.io
The billion-dollar security.txt problem
https://sansec.io/research/security-txt-trillion-dollar-problem
1 comments
Is something like a security.txt not a required part of IT certification? I would say a procedure around vulnerability handling and reporting to be required.