# skeletonsec.com — security contact (RFC 9116)
#
# Responsible disclosure: report vulnerabilities in this site or in
# skeletonsec tooling (authprobe, skelet0n — github.com/skeletonsec) by
# email. Every report is acknowledged within 72 hours. Please allow
# reasonable time for a fix to ship before any public disclosure.

Contact: mailto:chattr@linux.com
Expires: 2027-08-07T00:00:00.000Z
Preferred-Languages: en
Canonical: https://skeletonsec.com/.well-known/security.txt
Policy: https://skeletonsec.com/contact/
# Policy, short form: responsible disclosure — email the report,
# acknowledgment within 72h, no public disclosure before a fix ships.

# Guard: the ops CI check `security-txt-check` fails the build when this
# file's Expires is under 60 days out — renew, don't let it lapse.