# B3IQ / NPC Labs, Inc. — security contact
# https://www.rfc-editor.org/rfc/rfc9116
#
# Update Expires before it lapses; a stale security.txt reads as an abandoned
# contact path. Keep it roughly one year out.

Contact: mailto:contact@npclabs.org
Contact: https://b3iq.org/security#disclosure
Expires: 2027-08-03T00:00:00.000Z
Preferred-Languages: en
Canonical: https://b3iq.org/.well-known/security.txt
Policy: https://b3iq.org/security#disclosure

# Please use the subject line SECURITY so the report is routed promptly.
#
# We will not pursue legal action for good-faith research that respects customer
# data, avoids degrading the service for others, and gives us a reasonable
# opportunity to remediate before disclosure.
#
# Out of scope: denial-of-service and volumetric testing, social engineering of
# our staff or customers, and reports generated solely by automated scanners
# without a demonstrated impact.