# security.txt for evenstocks.com
# Conforms to RFC 9116 — https://www.rfc-editor.org/rfc/rfc9116
#
# If you've found a vulnerability or anything that looks like a
# security issue, please use the contact below. Responsible disclosure
# is appreciated; we'll acknowledge receipt within 72 hours and aim
# for a fix or mitigation within 14 days for high-severity reports.

Contact: mailto:security@evenstocks.com
Contact: mailto:taruntiwari.hp@gmail.com

# Preferred secure-channel keys (PGP/GPG): not currently published.
# If you need an encrypted channel, request our public key over the
# contacts above.

# Expiry: re-issue annually. CI will refuse a renewal that lands
# within 30 days of this date, so we never serve an expired record.
Expires: 2027-06-01T00:00:00.000Z

# Canonical URL — proves this file's authenticity at its serving location.
Canonical: https://evenstocks.com/.well-known/security.txt

# Languages we can respond in.
Preferred-Languages: en, hi

# Policy + acknowledgements: in case we add a public reporters page
# later. Empty today but stable URLs.
Policy: https://evenstocks.com/security-policy.html