# RFC 9116 — vulnerability disclosure front door (HEN-420).
# Static file: refresh Expires before it lapses (CI-monitored via the
# marketing build; policy detail at /security). Single origin (HEN-435,
# HEN-1030): marketing at /, the SPA for every other path.
Contact: mailto:security@secbird.io
Expires: 2027-01-07T00:00:00Z
Preferred-Languages: en, nl
Canonical: https://secbird.io/.well-known/security.txt
Policy: https://secbird.io/security
Acknowledgments: https://secbird.io/security/thanks