---
id: 3135
title: "Taking The Guesswork Out of Vulnerability Reporting"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/taking-guesswork-out-vulnerability-reporting"
published_at: "2019-05-23T13:00:00Z"
tags: ["github", "vulnerability-disclosure", "policy", "hackerone", "opensource", "security-md"]
phying_url: "https://phying.com/item/3135"
lang: en
---

# Taking The Guesswork Out of Vulnerability Reporting

## Summary

GitHub and HackerOne add SECURITY.md files and security advisories so researchers can responsibly disclose open source vulnerabilities, with HackerOne's Policy Builder generating a policy in minutes.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2019-05-23T13:00:00Z
- **Original:** https://www.hackerone.com/blog/taking-guesswork-out-vulnerability-reporting
- **Phying News:** https://phying.com/item/3135