# Versidian — security contact
# https://versidian.com/.well-known/security.txt
# Format: RFC 9116

# Primary channel. Encrypted reports welcome (see Encryption below).
Contact: mailto:tech@versidian.com

# Signal (optional): Versidian.01

# OpenPGP public key for tech@versidian.com
Encryption: https://versidian.com/.well-known/pgp-key.txt

Preferred-Languages: en

Canonical: https://versidian.com/.well-known/security.txt

# MUST be updated before this date or the file is invalid.
# Calendar reminder set.
Expires: 2027-08-20T00:00:00.000Z

# Versidian is pre-launch. This site is a static marketing page: no user
# accounts, no user data, no running verification service. Reports about
# this domain — DNS and mail authentication, TLS, subdomain takeover, the
# waitlist form endpoint, or anything else in scope below — are welcome.
#
# In scope:     versidian.com and its subdomains.
# Out of scope: third-party services we use but do not operate
#               (form and mail hosting, analytics, the code host).
#               Please report those to the relevant provider.
#
# We have no bug bounty and cannot offer payment. We will acknowledge
# reports, act on what we can, and credit you if you would like that.
#
# Cryptographers and security researchers: https://versidian.com/collaborate.html