# Arkitype — security contact and disclosure policy.
# https://www.rfc-editor.org/rfc/rfc9116

Contact: mailto:security@arkitype.srinidhibhat.com
Expires: 2027-01-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://arkitype.srinidhibhat.com/.well-known/security.txt
Policy: https://arkitype.srinidhibhat.com/trust

# What we ask
#
# Report privately and give us a reasonable chance to fix it before you
# publish. Do not run automated scanners against the production service,
# do not access, modify or delete data that is not yours, and do not
# degrade the service for anyone else. Use your own account and your own
# test data.
#
# What you can expect
#
# An acknowledgement within 3 working days, an assessment within 10, and
# an honest answer about the timeline after that. We will not pursue legal
# action against anyone who reports a genuine issue in good faith and
# stays within the lines above. We will credit you if you want it, and
# stay quiet about you if you do not.
#
# There is no paid bug bounty. Saying so here is fairer than letting you
# find out after you have spent a weekend on it.