Skip to content

Update security.md with AI disclosure guidelines #5979

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
hardillb merged 1 commit into from
Oct 23, 2026
+4 −1
Merged

Update security.md with AI disclosure guidelines #5979

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion nuxt/content/handbook/engineering/security.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,6 +38,7 @@ do not benefit anyone involved.
1. Time/date (UTC) the issue was discovered
2. Username/email of any users involved with the issue
3. URLs involved in the issue; simply providing the home url of our website is not sufficient
4. Disclose use of AI in finding, preparing or verifying the report

The more concrete information that can be provided in the initial issue report, the quicker we will
be able to evaluate it.
Expand All @@ -50,7 +51,9 @@ of bug bounty rewards for genuine issues they submit.
## Bug Bounties

At our sole discretion, we may choose to reward a responsibly disclosed issue according
to their severity, impact and quality of report.
to their severity, impact and quality of report. We also consider the role of AI in the report; asking
an AI agent to do all the work to find issues does not represent work done by a human that warrants
reward.

We also consider a reporter's history of reporting issues. We will not reward someone who spams
us in the hope that something sticks.
Expand Down
Loading