# Security policy for RoastMy.dev — RFC 9116
#
# This file existed but was never deployed: .gitignore carried a blanket
# "*.txt" rule, so it was never committed and /.well-known/security.txt
# returned 404 in production. Our own product checks other sites for this file.

Contact: mailto:support@foxxception.com
Expires: 2027-09-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://roastmy.dev/.well-known/security.txt

# We welcome responsible disclosure and aim to acknowledge reports within 48
# hours. Please include steps to reproduce. Do not run automated scans that
# degrade the service for other users, and do not access or modify data that
# is not yours.