# Add security category in Discourse

**URL:** https://meta.discourse.org/t/add-security-category-in-discourse/215853
**Category:** Site feedback
**Created:** [January 24, 2022, 6:46pm UTC](https://meta.discourse.org/t/add-security-category-in-discourse/215853 "2022-01-24T18:46:31Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![anon40545810](https://avatars.discourse-cdn.com/v4/letter/a/d26b3c/32.png) [@anon40545810](https://meta.discourse.org/u/anon40545810)
#### Post date: [January 24, 2022, 6:46pm UTC](https://meta.discourse.org/t/add-security-category-in-discourse/215853/1 "2022-01-24T18:46:31Z")

</div>

1. I didn’t find an information security category for the Discourse. I find this subject interesting, nowadays there are many data security policies such as the General Data Protection Regulation (GDPR). It would be interesting to discuss these matters in this category.
2. A good example of this is Bitwarden, which has several information security policies such as the CCPA - California Consumer Privacy Act (CCPA), Privacy Shield, among others.
3. These security policies aim to make a system or software auditable, secure and transparent for customers, employees, partners and users.
4. We may discuss these matters in this category in order to always improve the transparency, security of Discourse
5. I’m not an expert in the field of information security, but there may be users or people interested in improving Discourse with security. With this complementary objective that this category can be important.
6. I cited Bitwarden as an example of a company and software that has several information security policies, my goal is not to disclose this company/software. My goal is just to refer to something that already exists and see if that makes sense to Discourse.
7. Perhaps in the future Discourse will want to have multiple information security policies. This category could be relevant to enable this dialogue.

#### In short, by adding the security category we are talking about these things

- this category involves an area of ​​software security policies,
- questions about data security policy
- improve Discourse security
- possible flaws to be fixed
- We can in this category minimize the risks of Discourse failures or vulnerabilities. By understanding and seeing different points of view.

---

<div class="post-metadata">

### Author: ![Canapin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/canapin/32/119591_2.png) [@Canapin](https://meta.discourse.org/u/Canapin)
#### Post date: [January 24, 2022, 7:15pm UTC](https://meta.discourse.org/t/add-security-category-in-discourse/215853/2 "2022-01-24T19:15:46Z")

</div>

> [@anon40545810](#):
>
> - improve Discourse security
> - possible flaws to be fixed

Don’t know if you’ll find this information useful, but Discourse’s dev team has an account on Hackerone:

> **[Discourse - Bug Bounty Program | HackerOne](https://hackerone.com/discourse?type=team)**
>
> The Discourse Bug Bounty Program enlists the help of the hacker community at HackerOne to make Discourse more secure. HackerOne is the #1 hacker-powered security platform, helping organizations find and fix critical vulnerabilities before they can be...

---

<div class="post-metadata">

### Author: ![MarkDoerr](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/markdoerr/32/549630_2.png) [@MarkDoerr](https://meta.discourse.org/u/MarkDoerr)
#### Post date: [January 29, 2022, 1:42am UTC](https://meta.discourse.org/t/add-security-category-in-discourse/215853/3 "2022-01-29T01:42:27Z")

</div>

I think having a #security category isn’t a bad idea. That said I’ll pass it around the team to see what they think.

> [@anon40545810](#):
>
> Perhaps in the future Discourse will want to have multiple information security policies. This category could be relevant to enable this dialogue.

We do have security policies in place. You can find that information here:

- [Discourse Security Brief](https://www.discourse.org/security)
- [Discourse Security Policy](https://github.com/discourse/discourse/blob/main/docs/SECURITY.md)
- [Discourse Privacy Q & As](https://www.discourse.org/privacy)
- [CDCK Inc. Forms](https://www.discourse.org/forms)

---

<div class="post-metadata">

### Author: ![anon40545810](https://avatars.discourse-cdn.com/v4/letter/a/d26b3c/32.png) [@anon40545810](https://meta.discourse.org/u/anon40545810)
#### Post date: [January 30, 2022, 9:56pm UTC](https://meta.discourse.org/t/add-security-category-in-discourse/215853/4 "2022-01-30T21:56:35Z")

</div>

Thank you so much for the feedback, you are amazing
