You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/programs/security-page.md
+25-3Lines changed: 25 additions & 3 deletions
Original file line number
Diff line number
Diff line change
@@ -3,6 +3,16 @@ title: "Security Page"
3
3
path: "/programs/security-page.html"
4
4
id: "programs/security-page"
5
5
---
6
+
7
+
<style>
8
+
.contents {
9
+
margin-left: 1.45rem;
10
+
margin-right: 1.45rem;
11
+
border-radius: 0.3em;
12
+
width: 60%;
13
+
}
14
+
</style>
15
+
6
16
A program's Security Page contains key information about your program and your security disclosure policy. The Security Page sets expectations for hackers you invite to your bounty program and it also outlines your:
7
17
* Disclosure policy
8
18
* Bug eligibility
@@ -11,7 +21,17 @@ A program's Security Page contains key information about your program and your s
11
21
12
22

13
23
14
-
### Completing the Security Page
24
+
<divclass="background contents"markdown="1">
25
+
26
+
In this article, you can learn about:|
27
+
------------------------------------ |
28
+
[Completing the Security Page](#completing) |
29
+
[Claiming the Security Page](#claiming) |
30
+
[Suggesting Edits on the Security Page](#suggesting) |
31
+
</div>
32
+
33
+
<h3id="completing">Completing the Security Page</h3>
34
+
15
35
To edit your Security Page, go to **Settings > General > Information**.
16
36
17
37
A complete security page includes the following:
@@ -26,7 +46,8 @@ A complete security page includes the following:
26
46
27
47
It's important to keep your security page up-to-date so hackers always know the important details about your program. Check out the security pages for Yahoo!, Twitter, and Dropbox for reference.
28
48
29
-
### Claiming the Security Page
49
+
<h3id="claiming">Claiming the Security Page</h3>
50
+
30
51
Unless a security page is claimed, the page is curated by the HackerOne community. An organization can claim their security page in order to:
31
52
* Take editorial control of their disclosure policy
32
53
* Self-update their information
@@ -50,5 +71,6 @@ HackerOne reviews each claim submission for validity before granting the claim.
50
71
51
72
><i>Note: Hackers looking to claim a page need to be above a certain reputation threshold to be given direct editing rights. If they don't have rights, they can suggest changes which will get reviewed and approved by HackerOne staff.</i>
52
73
53
-
### Suggesting Edits on the Security Page
74
+
<h3id="suggesting">Suggesting Edits on the Security Page</h3>
75
+
54
76
You can suggest edits to any unclaimed security page by clicking on the **Suggest edits** link. A HackerOne staff will review your changes and approve them if they are valid.
0 commit comments