points
Though some sites drop it at the root /security.txt instead of /.well-known/security.txt
Note, invites beg bounties spam.