I really like this system. I’d like to build a system to add some of my and my friends‘ important important information into the system. But I’m afraid that our info will be stolen or hacked. How to protect this system? Or should I just change into another system?

We take security very seriously at Discourse. We welcome any peer review of our 100% open source code to ensure nobody’s Discourse forum is ever compromised or hacked. You can read more about that at discourse/docs/SECURITY.md at main · discourse/discourse · GitHub

The only way to fully secure any piece of software (online or offline) is to take it to the desert, drop it in a 20ft hole and dump cement over it. So, 100% continuous, permanent security is not possible (just look at Denuvo). But, if the question is “Is open source software more secure than closed…

The main site settings you would want to flip on here HTTPS, obviously! secure email (don’t leak content over email) login required (don’t show content to anons) account approval required or invite only to taste (don’t allow anyone except people you know / approve) to join Can you thi…

[image] jaevanryssel: A good thing to know about Discourse based on what I’ve read on this forum/meta is that any image, uploaded document (pdf, word, excel, etc.) can be accessed even when the forum is set to private if somebody from outside the forum knows the exact url for the file. Wouldn…

Hi! I totally love Discourse so far for my community’s needs. Thanks so much for building it. I also do research on the security of open source projects. For this research I rely heavily on the National Vulnerability Database, which is where a lot of major vendors and open source projects disclose …

From my perspective that is covered by our security doc in the repo… the first two paragraphs of it specifically… which covers our public bug bounty program URL and where you can click to see a list of security checkins live 24/7.

Don’t nvd work directly with hackerone here? It seems far more beneficial than working directly with Discourse on this.

Thank you for your reply. Your current security policy is certainly impressive in a lot of ways. However, I still think there are benefits to having your security vulnerabilities reported to NVD that your current policy does not provide. Now, if I understand correctly, you announce security fixes …

How secure is Discourse?

Support

SidV January 16, 2018, 12:51pm 3

Mmm

How many sites like Discouse do you know that has got HackerOne 's services ?

8 Likes

Topic		Replies	Views
Add security category in Discourse Site feedback	3	755	January 30, 2022
Newbie Question re: security Support	11	282	February 20, 2025
Discourse Security Self-hosting	6	735	September 1, 2021
Inquiring about the Security Measures in Discourse Support	3	1019	February 11, 2023
Show Discourse version on the /about page Feature	11	3034	May 11, 2024

How secure is Discourse?

Related topics