# Security contact for Spaw (spaw.co), per RFC 9116.
#
# We acknowledge a report within five business days. That is an
# acknowledgement by a person, not a fix, and there is no bounty.
# The full policy, including what we ask you not to do, is at
# https://spaw.co/trust#reporting-a-vulnerability
#
# Expires is computed when this file is served and is always
# 90 days ahead, so it cannot lapse unnoticed.

Contact: mailto:support@spaw.co
Contact: https://spaw.co/support?topic=security
Expires: 2026-12-10T00:00:00Z
Preferred-Languages: en
Canonical: https://spaw.co/.well-known/security.txt
Policy: https://spaw.co/trust#reporting-a-vulnerability