From b8c1b20044b83e201ce390db41c6800eee0ad3ea Mon Sep 17 00:00:00 2001 From: Justin Spahr-Summers Date: Wed, 27 Nov 2024 09:00:33 -0600 Subject: [PATCH] Create SECURITY.md --- SECURITY.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..2015472 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,14 @@ +# Security Policy +Thank you for helping us keep Model Context Protocol and any systems it interacts with secure. + +## Reporting Security Issues + +The Model Context Protocol project is maintained by [Anthropic](https://www.anthropic.com/). + +The security of our systems and user data is Anthropic’s top priority. We appreciate the work of security researchers acting in good faith in identifying and reporting potential vulnerabilities. + +Our security program is managed on HackerOne and we ask that any validated vulnerability in this functionality be reported through their [submission form](https://hackerone.com/anthropic-vdp/reports/new?type=team&report_type=vulnerability). + +## Vulnerability Disclosure Program + +Our Vulnerability Program Guidelines are defined on our [HackerOne program page](https://hackerone.com/anthropic-vdp).