# Security contact for maveriko.com
# https://www.rfc-editor.org/rfc/rfc9116

Contact: mailto:bithindra@gmail.com
Expires: 2027-08-14T18:36:26Z
Preferred-Languages: en
Canonical: https://maveriko.com/.well-known/security.txt
Policy: https://maveriko.com/about

# We do not run a paid bounty. We do commit to acknowledging a good-faith
# report within 5 working days, and to crediting the reporter unless they
# ask otherwise.
#
# In scope:   https://maveriko.com and its API.
# Out of scope: findings produced BY the audit tool about third-party sites
#               (those are the product working as intended), volumetric or
#               denial-of-service testing, and social engineering.
#
# Please do not run automated scanners against the audit endpoint — it makes
# outbound fetches to real third-party sites on our behalf, so load testing it
# attacks someone else.