Configuration
This guidance is for all UK government organisations to configure the Vulnerability Reporting Service (VRS) for their websites and web services.
Step 1: implement a security.txt
There is a central deployment of the security.txt file to make it easier for you to implement on your systems and services.
You can find more about how to implement a signpost, including example code, here:
https://github.com/co-cddo/implement-security.txt
Step 2: submit contact and system details
Let GC3 know you have configured the security.txt by emailing you and your team's contact details and configured domains and URLs to vm[at]gc3.security.gov.uk