# amlr.io — coordinated vulnerability disclosure (RFC 9116)
#
# Expires is mandatory and an expired file is worse evidence than none:
# roll the date every year (docs/security/README.md, Recurring).
# No monetary rewards. Production systems only, no scanning that degrades
# service, no accessing data that is not yours; act in good faith and we
# will not pursue you. Full policy below.

Contact: mailto:ops@amlr.io
Expires: 2027-10-01T00:00:00.000Z
Preferred-Languages: en, bg
Policy: https://amlr.io/vulnerability-disclosure.html
Canonical: https://amlr.io/.well-known/security.txt