Useful reference https://securitytxt.org/

Though some sites drop it at the root /security.txt instead of /.well-known/security.txt

Note, invites beg bounties spam.