security.txt

/.well-known/security.txt (spec)

Allows sites to communicate their security policies, e.g. how to report a vulnerability.