Create SECURITY.md

This commit is contained in:
Justin Spahr-Summers 2024-11-27 09:00:33 -06:00
commit b8c1b20044
No known key found for this signature in database

14
SECURITY.md Normal file
View file

@ -0,0 +1,14 @@
# Security Policy
Thank you for helping us keep Model Context Protocol and any systems it interacts with secure.
## Reporting Security Issues
The Model Context Protocol project is maintained by [Anthropic](https://www.anthropic.com/).
The security of our systems and user data is Anthropic’s top priority. We appreciate the work of security researchers acting in good faith in identifying and reporting potential vulnerabilities.
Our security program is managed on HackerOne and we ask that any validated vulnerability in this functionality be reported through their [submission form](https://hackerone.com/anthropic-vdp/reports/new?type=team&report_type=vulnerability).
## Vulnerability Disclosure Program
Our Vulnerability Program Guidelines are defined on our [HackerOne program page](https://hackerone.com/anthropic-vdp).