# RatePulse — security contact and vulnerability disclosure policy
# RFC 9116. RATEPULSE LTD, company number 17408208, England and Wales.
#
# Served as a static file from public/, which Vite copies into dist/ at
# build time, so nginx's `try_files $uri` finds it before the single-page
# app catch-all. That ordering is the whole point: without a real file
# here, /.well-known/security.txt returns index.html with a 200, and a
# researcher looking for a contact finds a web app instead of an address.

Contact: mailto:security@ratepulse.io
Expires: 2027-08-25T00:00:00.000Z
Preferred-Languages: en
Canonical: https://ratepulse.io/.well-known/security.txt
Policy: https://ratepulse.io/legal/security