# Security disclosure policy for hadalinstruments.com
# RFC 9116. This file publishes in the same act that created the address it
# names — a security.txt with an unmonitored contact routes a real report
# into a void while looking like a policy, so this file did not exist until
# the route did.

Contact: mailto:security@hadalinstruments.com
Expires: 2027-08-01T00:00:00.000Z
Canonical: https://hadalinstruments.com/.well-known/security.txt
Preferred-Languages: en

# Scope: this domain and the software it serves. Reports are read by the
# operator; there is no bug-bounty programme and this file does not imply one.
# Acknowledgement follows the support model's published targets — targets,
# not a service-level agreement.