# Vulnerability disclosure policy for Bastion Gateway.
# https://www.rfc-editor.org/rfc/rfc9116
#
# Served as a static file rather than a route: a researcher probing a broken
# deployment still needs to be able to reach us, and the fewer moving parts
# between them and this contact the better.

Contact: mailto:security@bastiongateway.com
Preferred-Languages: en, cy
Canonical: https://bastiongateway.com/.well-known/security.txt
Policy: https://bastiongateway.com/trust#disclosure

# Expires must be refreshed; a stale security.txt is treated as unmaintained by
# tooling and by researchers.
Expires: 2027-07-30T00:00:00.000Z