Currently, we have, written by Rob: https://jena.apache.org/about_jena/security-advisories.html
which has both the process/policy and advisories. It can be found via the search. My proposal is to have: https://jena.apache.org/security as a URL we can give out * Split into policy (/security) and advisories (/security/advisories). * Redirect /about_jena/security-advisories.html to /security * Add a link to the front page to get to https://jena.apache.org/security Andy