# Consent Tree — security contact
# https://consentree.in/.well-known/security.txt
#
# RFC 9116. The Expires field is mandatory under that RFC and is deliberately
# short: a stale security.txt is worse than none, because it tells a researcher
# in good faith to write to an address nobody is reading. Renewing it is a row
# in docs/runbooks/RECURRING_OPERATIONS.md.

Contact: mailto:cdpo@consentree.in
Expires: 2027-02-13T00:00:00.000Z
Preferred-Languages: en
Canonical: https://consentree.in/.well-known/security.txt
Policy: https://consentree.in/trust.html

# We credit researchers who report in good faith. We do not run a paid bounty
# programme today, and we would rather say so here than let you find out after
# you have spent a weekend on it.