docs(get-started): add audit reports page

docusaurus.config.js

@@ -268,10 +268,6 @@ const config = {
                 label: "Tech Articles",
                 to: "https://medium.com/cartesi/tagged/tech",
               },
-              {
-                label: "Bug Bounty",
-                to: "https://immunefi.com/bounty/cartesi/",
-              },
               {
                 label: "Run a Node",
                 to: "https://explorer.cartesi.io/staking",

get-started/audit-reports.md

@@ -0,0 +1,30 @@
+---
+id: audit-reports
+title: Audit reports
+---
+
+This page lists the security reviews of the Cartesi Rollups stack, whether they were carried out by the Cartesi QA team or by an external audit firm. Each report is a PDF with the reviewed versions and the findings that were reported to the maintainers, with the description and impact of each one.
+
+:::note
+Reviews by the Cartesi QA team are internal reviews. They are not audits by an external firm.
+:::
+
+| Date | Report | Reviewed by | Components | Download |
+| --- | --- | --- | --- | --- |
+| August 4, 2026 | Rollups Node v2.0.0-alpha.12 security review | Internal QA team | rollups-node v2.0.0-alpha.12, rollups-contracts v3.0.0-alpha.6, CLI alpha.34 and alpha.35 | [PDF](pathname:///audit-reports/rollups-node-v2.0.0-alpha.12-internal-security-review.pdf) |
+
+## Reporting a vulnerability
+
+Do not open a public issue, pull request or discussion for a security problem. Report it privately by email to [rollups@cartesi.foundation](mailto:rollups@cartesi.foundation).
+
+Please include:
+
+- The affected component and version (release tag or commit).
+- The impact and who is affected.
+- Steps to reproduce, ideally a script or a test.
+
+Reports sent by email are not encrypted. If your report contains sensitive material, mention it in your first message.
+
+### What happens next
+
+We review each report, decide how to handle it, and reply with the outcome. When a fix is released and the issue affects users, we may describe it on this page. Please give us a reasonable time to fix an issue before you disclose it publicly.

sidebarsGetStarted.js

@@ -58,6 +58,11 @@ module.exports = {
           label: 'Rollup Lab',
           href: 'https://rolluplab.io',
         },
+        {
+          type: 'doc',
+          id: 'audit-reports',
+          label: 'Audit Reports',
+        },
       ],
     }
   ],

src/theme/Footer/FooterNav.js

@@ -22,8 +22,6 @@ function FooterNav() {
     usagePolicy: "https://cdn.sanity.io/files/zg5gx8g4/production/ddd64effd0cbf8ff1b4193fe4ee85c7016e7c168.pdf",
     examples: "https://docs.cartesi.io/",
     showcase: "https://rolluplab.io/",
-    bugBounty:
-      "https://immunefi.com/bounty/cartesi/?_gl:1*10hyf54*_ga*MTAyODg1OTI1LjE2ODY5MDA3NjA.*_ga_HM92STPNFJ*MTY4Nzg2ODk0Ny41LjEuMTY4Nzg2OTU0OC4xOC4wLjA.",
     staking: "https://explorer.cartesi.io/stake",
     grantsProgram: "https://governance.cartesi.io/",
     cgpVoting: "https://snapshot.org/#/cartesi-community-grants-program.eth",