# security.txt tells security researchers how to report a vulnerability to you.
# Format: RFC 9116. Lines starting with # are comments and can be removed.
#
# Where to put it: https://example.com/.well-known/security.txt
# (the file must be served over HTTPS as plain text).
#
# Required fields: Contact and Expires.
# Set Expires less than a year ahead and put a reminder in your calendar to update it.
# Replace example.com with your domain before publishing.

Contact: mailto:security@example.com
Expires: 2027-09-30T23:59:59.000Z

# Optional fields. Delete any you don't use.
Preferred-Languages: en
Canonical: https://example.com/.well-known/security.txt
Policy: https://example.com/security
Acknowledgments: https://example.com/security/thanks
