# How to report a security problem in Avaro Core.
#
# RFC 9116. Kept deliberately short: the value of this file is that a
# researcher who finds something at 2am knows where to send it without
# hunting through a website.

Contact: mailto:security@avarotechnologies.com
Contact: https://www.avaro-core.app/privacy

# Refresh this date. An expired security.txt is treated as unmaintained,
# and a researcher who reads it as stale may not write to you at all.
Expires: 2027-09-22T00:00:00.000Z

Preferred-Languages: en
Canonical: https://www.avaro-core.app/.well-known/security.txt
Policy: https://www.avaro-core.app/privacy

# We will acknowledge a genuine report, keep you informed of the fix, and
# will not pursue anyone who reports in good faith.