security.txt (RFC 9116) @securitytxt
An RFC that helps organisations define security policies by @EdOverflow & @nightwatchcyber. 👉 https://t.co/KktAVPg8PH 📖 https://t.co/LVpnsiLQNZ securitytxt.org /.well-known/ Joined November 2015-
Tweets211
-
Followers3K
-
Following19
-
Likes190
🚨 BREAKING 🚨 Our @securitytxt 2024 version is updated containing a new CTF-like challenge. Check it out now: swisscom.ch/.well-known/se…
This is probably the best public Vulnerability Disclosure Program terms I've ever seen. It demonstrates the exact nature of a VDP, "see something, say something" no more, no less. +10 for hosting a @securitytxt file too. Nice work @ServiceNow 👏
🇯🇵
JPCERT/CC Eyes「RFC 9116「security.txt」の紹介（2022年8月）の続報」を公開。RFC 9116のおかげで開発者との脆弱性関連情報のコーディネーション（調整）が大変スムーズにできた事例と、「security.txt」の紹介記事についてご紹介します。^KI blogs.jpcert.or.jp/ja/2023/11/rfc…
Looking for a little project to keep you busy on the weekend? I was just thinking: how many of the breached websites in @haveibeenpwned now have a security.txt file? So, if you feel like grabbing those domains and querying them all, there's an API here: haveibeenpwned.com/API/v3#AllBrea…
Switzerland's largest retail company @migros published their vulnerability disclosure policy via @securitytxt 🥳
This is great: having a security.txt file is now mandatory for Dutch government websites. They either need to apply this as a standard or provide a good justification for why they're not using it ("Apply of Explain") digitaltrustcenter.nl/nieuws/securit…
security.txt 📑 has been added to the 'Comply or Explain' list of the Netherlands Standardisation Forum. This means that Dutch municipalities, provinces, the state, water boards and all operational organisations are obliged to apply this open standard.✅forumstandaardisatie.nl/nieuws/securit…
@HttpSecHeaders @CISAgov Awesome to see this! Unfortunately, the incorrect RFC ID was referenced. It should be RFC 9116. :(
Bridge the gap between your website and security researchers. ✅ Implement security.txt and promote coordinated vulnerability disclosure. Need help getting started? ➡️ Head on over to securitytxt.org. #securitytxt #cybersecurity
@securitytxt nice recommendation for security.txt in this @CISAgov advisory cisa.gov/news-events/cy…
Can you spare an hour to help us improve rfc-editor.org (the official home of RFCs)? If you’ve used RFCs for work, school or research, we’d love to learn from you - particularly if you're new here! Volunteer by answering a few quick questions: docs.google.com/forms/d/e/1FAI…
A tale of Google dorks finding subdomain takeovers plus why having a security.txt & a responsive security team are good news all round. London Councils & pirate books. Google dorking for subdomain takeovers. Thanks to our @OPSEC_failed pentestpartners.com/security-blog/… #cybersecuritytips
Check out the just released fresh version of Internet.nl with improved tests for CSP and security.txt, en.internet.nl/article/releas… Happy testing and improving! #moderninternet
@oh2fih also wrote a Bash helper script to generate RFC 9116-compliant security.txt files. github.com/oh2fih/securit…
🇫🇮 Shout-out to @oh2fih who wrote their Master's thesis on security.txt adoption on .fi domains. theseus.fi/handle/10024/7…
Where did you first hear about security.txt?
@Jester0x01 @rez0__ @OpenAI Now on the main website too: openai.com/security.txt. :)
Troy Hunt @troyhunt
250K Followers 1K Following Creator of @haveibeenpwned. Microsoft Regional Director. Pluralsight author. Online security, technology and “The Cloud”. Australian.
Intigriti @intigriti
211K Followers 668 Following Bug bounty & VDP platform trusted by the world’s largest organisations! 🌍
John Hammond @_JohnHammond
322K Followers 3K Following Cybersecurity Researcher @HuntressLabs Just Hacking Training @JustHackingHQ w/ @ethicalhacker https://t.co/UtsNJiyQtS && https://t.co/narO3sz7y6
Luke Stephens (hakluk... @hakluke
100K Followers 2K Following Hacker, marketer. I manage socials and marketing for cybersecurity orgs. Founder of @hacker_content and @haksecio
The XSS Rat - Proud X... @theXSSrat
166K Followers 1K Following Bug bounty profiles: https://t.co/3Uz5K130ah https://t.co/rzbqV5AmZ2 https://t.co/CDlzXdNvPB
Ripper @Ripper48123169
1 Followers 42 Following
Swan Htet Naing @SwanNaing51575
1 Followers 164 Following
Nika Kharebava @nikakharebva
0 Followers 53 Following
Raymond @onlyray7
237 Followers 350 Following Software Engineer. Rocket League Enthusiast https://t.co/2UcJI7knB5
Ali Hz @AliHzSec
453 Followers 744 Following
Khalid Khan @Khalidkhan0x
13 Followers 273 Following
Iam-M-i-r-z-a @O_Mirzaaa
1 Followers 2K Following
NEHAL SHAIKH @NEHALSHAIK83768
3 Followers 66 Following
Onkar Kolekar @Onkar_1604
1 Followers 53 Following
0xStr4ng3r @0xStr4ng3r
0 Followers 172 Following
Lalit_m3c4 @Lalitbhosale6
54 Followers 1K Following Lets H4ck | Pentest | Research | Bounty | CTFs | Researcher 🄱🄴🄻🄸🄴🅅🄴 🄺🄰🅁🄼🄰
Evan Nil @thr33thirty3
137 Followers 3K Following
Agenzia @getagenzia
2 Followers 6 Following Agenzia est une entreprise de services numériques (ESN) nouvelle génération. Nous accompagnons les PME dans leur transformation digitale en fusionnant deux pili
Abdurrahman @A550400
4 Followers 333 Following
Vinay Prajapat @VinayPraja2204
0 Followers 21 Following
Werner M. Fait @wernairfight94
391 Followers 370 Following
Aamir Hafeez @AamirHafeez1
5 Followers 275 Following
Andrew Heavin @AndrewHeavin
95 Followers 464 Following
zzzzzz @mynameisskool
6 Followers 157 Following
Aman @Aman1239950
0 Followers 122 Following
anmol @anmolescape
49 Followers 5K Following the dao is a path of desolation. ai x code x marketing.
SkylineSales8385 @troyyoung8385
226 Followers 3K Following Dedicated cypto trader,HODL ,Solana trench junkey ,ambitious about security protocols and aim to protect other traders from rug pulls,btc holder,web developer,s
Isaiah @Hacker_Ise
4 Followers 668 Following Web & Mobile Security Reseacher | Exploring Blockchain and Cloud Security | ARM | Chasing My Curiousity
DON'T TREAD ON ME @DonttreadMe
678 Followers 3K Following “Todos querem viver às custas do Estado. Eles esquecem que o Estado vive às custas de todos”. -Frédéric Bastiat
@nerdish_philipp@nord... @nerdish_philipp
103 Followers 468 Following My electricity supplier is green! Since 1999 without a car. FCK NZS! No space for NZS!
Lovelesh Gangil @loveleshgangil
230 Followers 1K Following Cyber Threat Management | CEH (Practical) | ISMS ISO 27001:2022 | CAP | CNSP | CCEP | GPCSSI '21 | ICSI (CNSS) | Offensive Security | DFIR
⬢ Jens Wiëchers @jwiechers
7K Followers 8K Following 📨[email protected]🗣️he/they 💼Herding shibes 🧑💻infosec, statistics 📚int'l rel/security, IHL/LOAC, IHRL ❤️ISO8601💜ISO216💙ISO7001💛ISO3166-1 🇩🇪DIN820
Fedora @chasing_tailx
4 Followers 361 Following
ANO FRANCK @ANOFRANCK165586
3 Followers 107 Following
Matt Kanninen (parody... @mathiastck
1K Followers 7K Following Android Dev. Gamer. Dad. Opinions here are my own, not those of my company, past or present. Specified as “parody". Resharing at: https://t.co/7qqKjWiegD
.m0rph 👽 @m0rphisto
43 Followers 551 Following Cybersecurity Specialist, Penetration Tester, Linux Freak
Kam Khan Sang @r1skkam
71 Followers 1K Following
Krysecu @krysecu
219 Followers 2K Following Cabinet de conseil en protection de l'information et des données. Sécurité des systèmes d'information en République de Guinée.
Vik @VictorZuyev
63 Followers 2K Following
Troy Hunt @troyhunt
250K Followers 1K Following Creator of @haveibeenpwned. Microsoft Regional Director. Pluralsight author. Online security, technology and “The Cloud”. Australian.
Lilith Wittmann @LilithWittmann
46K Followers 521 Following Krawallinfluencerin, “der Schwarze Block der Verwaltungsdigitalisierung”; politisch hier. 👩💻 @zerforschung & @bund_dev ✉️ [email protected].
Katie Paxton-Fear @InsiderPhD
97K Followers 2K Following Dr, apparently. Security Adovcate @semgrep & Hacker. #BugBounty hunter & #infosec YouTuber. APIs & Interlinked OffSec, PhD in AI+Sec @hacknotcrime. she/her
Scott Helme @Scott_Helme
37K Followers 326 Following Hacker, researcher, builder of things. Founded @securityheaders/@reporturi, Pluralsight author, Microsoft MVP, award winning entrepreneur. Likes cars.
Digital Trust Center @DTC_NL
2K Followers 335 Following Het Digital Trust Center (DTC) helpt ondernemers met veilig digitaal ondernemen. Het DTC is onderdeel van @MinisterieEZ.
ElSec_ @ElSec_
133 Followers 41 Following Cyber Security student working on security research. Areas of interest: web-application security, OSINT, and supply-chain attacks.
Gerben Javado @gerben_javado
7K Followers 420 Following Application Security @Meta focused on AI & Mobile Applications.
Michal Špaček @spazef0rze
10K Followers 325 Following In your web, securing your app. Hacker, webdev, speaker. Security @Shoptet, ex-@reporturi. HTTPS = How To Transfer Private Sh*. Also https://t.co/FaJemVWLCx, https://t.co/claenMAOrC.
Eduardo Vela @sirdarckcat
13K Followers 614 Following not mad. mentally divergent. personal profile, opinions my own. everything I say is probably wrong. @Google
Jeff Moss @thedarktangent
104K Followers 8 Following https://t.co/fgXNGNt7gm Abandoned this site in 2022 but hopeful for the future of social media. Consider migrating to Mastodon DEFCON.socal
John Matherly @achillean
23K Followers 462 Following Founder of Shodan (@shodanhq), Internet Cartographer, @gravwell_io board member
Dr. Amit Elazari, JSD @AmitElazari
4K Followers 2K Following Founder and CEO, OpenPolicy, Lecturer @UCBerkeley @BerkeleyISchool @ReichmanUni
Alex @alexanderjaeger
2K Followers 983 Following DFIR / CERT @Google - nice person - All opinions are mine... . Doing @TimesketchProj stuff. 🏊♂️ 🚲 🏃♂️ https://t.co/t1oC3lo40C Time matters
Cameron Dixon @hmft_xyz
668 Followers 0 Following
Nightwatch Cyber @nightwatchcyber
955 Followers 5 Following Official Twitter account for Nightwatch Cybersecurity
@IETF @ietf
16K Followers 5 Following The Internet Engineering Task Force makes the Internet work better.
Ed @EdOverflow
20K Followers 159 Following Web developer & security researcher. Senior Pentester @cure53berlin. Author of @securitytxt. ➡️ https://t.co/BOy1tiLLBrYou might like
