# Paypercut - Coordinated Vulnerability Disclosure
#
# We welcome reports of security vulnerabilities in our services.
#
# Summary of terms (full policy at the Policy: URL below):
#
#   - We do NOT operate a bug bounty program and do NOT offer
#     monetary rewards for vulnerability reports. Public credit is
#     available on request once an issue is resolved.
#   - Send an initial report describing the issue and the affected
#     domain, endpoint, or feature. Do NOT send exploit code,
#     proof-of-concept payloads, credentials, personal data, or any
#     captured data in the first message. We will provide a secure
#     channel for technical detail.
#   - Do NOT access, modify, delete, exfiltrate, or disclose data
#     that is not your own.
#   - Denial-of-service, load or stress testing, automated
#     vulnerability scanning, brute force, social engineering,
#     phishing, and physical attacks are out of scope and not
#     authorised.
#   - Keep the issue confidential until we confirm it is resolved.
#   - We aim to acknowledge reports within two business days.
#
# Unsolicited commercial offers (penetration testing, consulting,
# security services) sent to this address will not receive a reply.

Contact: mailto:security@paypercut.co
Expires: 2029-08-19T23:59:59.000Z
Policy: https://paypercut.com/security/vulnerability-disclosure-policy
Preferred-Languages: en
Canonical: https://paypercut.com/.well-known/security.txt
Encryption: https://paypercut.com/.well-known/pgp-key.txt
Encryption: openpgp4fpr:2c5813c1b467ef47be3278f74ba9f7b0a8cefffa

# Acknowledgments: https://paypercut.com/security/acknowledgments
# Hiring: https://paypercut.com/careers