# Ngaro: https://www.ngaro.net
#
# If you have found a security issue in Ngaro, this file tells you where to
# send it. Please tell us before you tell anyone else, and we will work with
# you rather than against you.
#
# We will not pursue legal action against anyone acting in good faith to find
# and report a problem. There is no bug bounty: we are a small company and
# cannot fund one, and we would rather say so plainly than imply otherwise.
#
# We aim to acknowledge a report within three business days. That is a promise
# to reply, not a promise to have fixed it by then.
#
# RFC 9116. Expires is mandatory and must be a future date, so this file needs
# re-stamping every year. Diary it: an expired security.txt reads as
# abandonment, which is worse than not publishing one at all.

Contact: mailto:ngaro.help@gmail.com
Expires: 2027-08-14T00:00:00.000Z
Preferred-Languages: en
Canonical: https://www.ngaro.net/.well-known/security.txt
Policy: https://www.ngaro.net/security.html#disclosure