# Security policy for comptacanada.ca
# https://securitytxt.org/

Contact: mailto:omili@cbcanada.ca
Contact: https://comptacanada.ca/legal/conditions.html
Expires: 2027-06-14T23:59:00.000Z
Preferred-Languages: fr, en
Canonical: https://comptacanada.ca/.well-known/security.txt
Policy: https://comptacanada.ca/legal/conditions.html

# How to report a security issue
#
# 1. Email omili@cbcanada.ca with the subject "SECURITY: <short description>"
# 2. Include : steps to reproduce, expected vs actual behavior, affected URL/endpoint,
#              your contact info (handle / email)
# 3. Allow up to 14 days for response before any public disclosure
# 4. Do not exploit, exfiltrate data, or impact production services
#
# We do not have a paid bug bounty at this time, but we will publicly credit
# all valid responsible disclosures (with your permission) on our website.