Security
A security contact is not published. It appears here only after the mailbox exists and is recorded in the organization registry.
Report a vulnerability through the published security contact once that mailbox exists. A security.txt file is added when production infrastructure is in place.