From 4c52f37649c46e5d2d8fab96f781a68eaf13b812 Mon Sep 17 00:00:00 2001 From: Robert Findley Date: Fri, 5 Dec 2025 16:00:32 -0500 Subject: [PATCH] SECURITY.md: add a security policy (#682) Consistent with other SDKs (typescript, python, csharp), add a SECURITY.md file citing Anthropic's overarching security policy. This is not specialized to the Go SDK, but seems better than not having a policy. --- SECURITY.md | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..6545156 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,15 @@ +# Security Policy + +Thank you for helping us keep the SDKs and systems they interact with secure. + +## Reporting Security Issues + +This SDK is maintained by [Anthropic](https://www.anthropic.com/) as part of the Model Context Protocol project. + +The security of our systems and user data is Anthropic’s top priority. We appreciate the work of security researchers acting in good faith in identifying and reporting potential vulnerabilities. + +Our security program is managed on HackerOne and we ask that any validated vulnerability in this functionality be reported through their [submission form](https://hackerone.com/anthropic-vdp/reports/new?type=team&report_type=vulnerability). + +## Vulnerability Disclosure Program + +Our Vulnerability Program Guidelines are defined on our [HackerOne program page](https://hackerone.com/anthropic-vdp).