# RFC 9116 — https://www.rfc-editor.org/rfc/rfc9116
#
# This file covers the ensurefix.com website. Vulnerabilities in the
# EnsureFix product itself go to the same address — say which one you
# are reporting, and the commit or version you tested.
#
# Only fields that are true are listed. Encryption and Acknowledgments
# are omitted rather than pointed at URLs that do not resolve; RFC 9116
# makes both optional, and a security.txt that sends a researcher's
# tooling to a 404 is worse than one that stays quiet.
#
# BEFORE THIS GOES LIVE, an operator must confirm the Contact mailbox is
# provisioned, monitored, and routed to someone who can act on a report.
# See EXTERNAL ACTIONS in the launch handover.
#
# Keep Expires under a year out and renew it before it passes.

Contact: mailto:security@ensurefix.com
Expires: 2027-09-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://ensurefix.com/.well-known/security.txt
Policy: https://ensurefix.com/security