generated: '2026-06-20'
method: searched
probe: true
source: https://www.microsoft.com/.well-known/security.txt
notes: >-
  Microsoft runs coordinated vulnerability disclosure and a bug bounty through the Microsoft
  Security Response Center (MSRC). Captured from the corporate security.txt (RFC 9116) at
  www.microsoft.com, which applies to Microsoft cloud services including SharePoint Online.
policy:
  - https://www.microsoft.com/en-us/msrc/cvd
  - https://www.microsoft.com/en-us/msrc/bounty
  - https://www.microsoft.com/en-us/msrc/bounty-safe-harbor
contact:
  - https://msrc.microsoft.com/report/vulnerability/new
acknowledgments:
  - https://msrc.microsoft.com/update-guide/acknowledgement
encryption:
  - https://msrc.microsoft.com/.well-known/csaf/openpgp/998D7EC1A516E3D17FF90480EF148D3CDE714E0D.asc
bug_bounty:
  program: Microsoft Bug Bounty Program (MSRC)
  url: https://www.microsoft.com/en-us/msrc/bounty
  safe_harbor: true
csaf: https://msrc.microsoft.com/csaf/provider-metadata.json
evidence:
  - {source: well-known/sharepoint-security.txt, kind: security.txt}
  - {source: https://www.microsoft.com/en-us/msrc/bounty, kind: bug-bounty}