# Copperfault security contact
# https://copperfault.com/.well-known/security.txt (RFC 9116)
#
# To report a vulnerability in Copperfault's own systems, or to coordinate
# on a finding we reported to you, email the address below. Please read
# our disclosure policy first; it covers scope, timelines and safe harbor.
#
# TODO (remove before launch): create the security@ mailbox and confirm it receives mail.
# TODO: add "Encryption: https://copperfault.com/pgp.asc" once the key exists, then sign this file (OpenPGP cleartext signature).
# TODO: renew "Expires" before it lapses (reminder: 2027-05-01).

Contact: mailto:security@copperfault.com
Expires: 2027-06-01T00:00:00.000Z
Policy: https://copperfault.com/disclosure
Preferred-Languages: en
Canonical: https://copperfault.com/.well-known/security.txt