# security.txt — RFC 9116. How to report a vulnerability in foldem.app.
#
# This file exists so a researcher who finds something does not have to guess at
# an address, and so an automated scan reaches a person rather than a form. It
# is a contact route and nothing else: it makes no promise of a bounty, and it
# grants no permission to test against production.
#
# Expires is REQUIRED by RFC 9116 and this one is a year out. A stale
# security.txt is worse than none, because a researcher reads an expired file as
# evidence that nobody is home. Docs/seo/refresh.md carries the month it is due.

Contact: mailto:support@foldem.app
Expires: 2027-09-03T00:00:00.000Z
Preferred-Languages: en, no
Canonical: https://foldem.app/.well-known/security.txt