Core: security.txt across every domain at once
A security.txt at /.well-known/security.txt tells researchers how to report a vulnerability.
In Core, you link one policy to multiple domains. You can also set a default policy per cluster, so new domains automatically get the same policy.
-
A clear reporting address
Security researchers know where to report a vulnerability.
-
One policy, multiple domains
Link one policy to multiple domains, and set a default policy for new projects.