Update SECURITY

zalando · Oct 21, 2020 · ceb88b9 · ceb88b9
1 parent affa632
commit ceb88b9
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/SECURITY b/SECURITY
@@ -1,3 +1,8 @@
-# Security
+We acknowledge that every line of code that we write may potentially contain security issues.
+We are trying to deal with it responsibly and provide patches as quickly as possible. 
 
-If you have discovered a security vulnerability, please email tech-security@zalando.de.
+We host our bug bounty program on HackerOne, it is currently private, therefore if you would like to report a vulnerability and get rewarded for it, please ask to join our program by filling this form:
+
+https://corporate.zalando.com/en/services-and-contact#security-form
+
+You can also send your report via this form if you do not want to join our bug bounty program and just want to report a vulnerability or security issue.