# Security policy for velmoraseo.com
# Conforms to RFC 9116 (https://datatracker.ietf.org/doc/rfc9116/)

Contact: mailto:security@velmoraseo.com
Contact: https://velmoraseo.com/trust#disclosure
Expires: 2027-05-23T00:00:00.000Z
Preferred-Languages: en
Canonical: https://velmoraseo.com/.well-known/security.txt
Policy: https://velmoraseo.com/trust#disclosure
Acknowledgments: https://velmoraseo.com/trust#disclosure
Hiring: https://velmoraseo.com/contact

# Scope
# In-scope: velmoraseo.com and its subdomains; sites we host that
# explicitly opt in. Out-of-scope: client-controlled production
# sites (report to the client directly), DoS, social engineering,
# physical attacks.

# Safe harbor
# We will not pursue civil or criminal action against researchers
# acting in good faith and consistent with this policy. See
# https://velmoraseo.com/trust#disclosure for the full statement.