Vulnerabilities
security.txt
Also: RFC 9116
A small text file at /.well-known/security.txt telling researchers how to report a vulnerability to you.
In more detail
It lists a contact, optional encryption key, policy link and expiry date. Publishing one is a cheap signal that you take reports seriously.