# Exception Security — vulnerability disclosure for THIS platform.
#
# This file is about exceptionsecurity.com itself. It is not the channel for
# findings against a client engagement; those belong in the platform, where
# they are timestamped, hash-chained and covered by the engagement's terms.
#
# https://www.rfc-editor.org/rfc/rfc9116

# Two ways in, and they reach the same people. The form does not need an
# account and asks for an email address only so we can answer you.

Contact: mailto:security@exceptionsecurity.com
Contact: https://exceptionsecurity.com/disclose/?p=exception-security
Expires: 2027-08-26T23:59:59.000Z
Policy: https://exceptionsecurity.com/security/
Preferred-Languages: en
Canonical: https://exceptionsecurity.com/.well-known/security.txt