# Vilkax responsible-disclosure contact (RFC 9116).
#
# If you have found a vulnerability in vilkax.com, the Vilkax API,
# the mobile app, the desktop agent, or any other Vilkax surface,
# please reach the security team at the address below. We respond
# within one business day and credit researchers in the SECURITY.md
# advisories section after the fix ships.

Contact: mailto:security@vilkax.com
Expires: 2027-12-31T23:59:59.000Z
Preferred-Languages: en
Canonical: https://vilkax.com/.well-known/security.txt
# Policy and credit both live on the public page. They used to point at a
# GitHub blob in a private repository, which answered 404 for every researcher
# who followed RFC 9116 to find the policy - the one field that has to resolve.
Policy: https://vilkax.com/legal/security-disclosure/
Acknowledgments: https://vilkax.com/legal/security-disclosure/#credit