# SteadySec security contact
# This is a fully static site - no backend, no database, no sessions.
# If you still find something worth reporting, we want to hear about it.
#
# The full policy - scope, rules of engagement, safe harbour and the response
# times we commit to - lives at https://steadysec.eu/security

Contact: mailto:hello@steadysec.eu
Expires: 2027-09-01T12:00:00.000Z
Canonical: https://steadysec.eu/.well-known/security.txt
Policy: https://steadysec.eu/security
Acknowledgments: https://steadysec.eu/security#acknowledgements
Preferred-Languages: en, cs

# Summary of the policy, for anyone reading only this file
# 1. Good-faith research is welcome; don't disrupt the service for visitors.
# 2. Client systems are out of scope. Nothing here authorises testing them.
# 3. We acknowledge within 3 working days and triage within 10.
# 4. Report what you find, give us reasonable time to fix it, and we'll credit you if you want.