Add section on not offering bug bounty currently

This commit is contained in:
Oliver Günther
2023-11-28 13:46:42 +01:00
parent 0e44f3b3ec
commit a3673b60fe
@@ -61,6 +61,9 @@ If you can, please send us a PGP-encrypted email using the following key:
Please include a description on how to reproduce the issue if possible. Our security team will get your email and will attempt to reproduce and fix the issue as soon as possible.
> **Please note:** OpenProject currently does not offer a bug bounty program. We will do our best to give you the appropriate credits for responsibly disclosing a security vulnerability to us. We will gladly reference your work, name, website on every publication we do related to the security update.
## OpenProject security features
### Authentication and password security