# Provael security.txt - RFC 9116
# https://www.provael.com/.well-known/security.txt
#
# Expires below is load-bearing: RFC 9116 s2.5.5 makes the whole file invalid once it
# passes, and scanners then read provael.com as having no disclosure policy at all.
# scripts/check-routes.mjs fails the build 30 days out, so this has to be renewed
# (and kept under a year ahead) rather than left to lapse quietly. Canonical must
# also keep matching the host the site actually serves on (s2.5.2).

Contact: mailto:hello@provael.com
Contact: https://github.com/provael/provael/security/advisories/new
Expires: 2027-07-06T00:00:00.000Z
Preferred-Languages: en
Canonical: https://www.provael.com/.well-known/security.txt
Policy: https://www.provael.com/security
Acknowledgments: https://github.com/provael/provael/security
# Provael is an offensive-security tool. Please disclose responsibly and only test
# systems you own or are explicitly permitted to assess.