# RFC 9116 security contact.
#
# A published, machine-readable disclosure channel is table stakes for a company
# that custodies other companies' evidence — a researcher who finds something
# should never have to guess where to send it.

# Switch to security@notaree.io once the domain routes mail — see
# apps/web/src/lib/contact.ts. A bouncing security contact is worse than none.
Contact: mailto:eckoeyo@gmail.com
Expires: 2027-09-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://notaree.io/.well-known/security.txt
Policy: https://notaree.io/security