# Private.Ki — coordinated vulnerability disclosure (RFC 9116).
# We do not run a paid bug bounty. We do promise a prompt reply, safe harbour
# for good-faith research, and credit. The full policy is linked below.
# Encrypted reports are welcome: the PGP key is at the Encryption URL.

Contact: mailto:hello@privateki.net
Expires: 2027-10-08T00:00:00.000Z
Encryption: https://private.ki/pgp/hello@privateki.net.asc
Policy: https://private.ki/en/security-disclosure
Acknowledgments: https://private.ki/en/security-disclosure#thanks
Preferred-Languages: en
Canonical: https://private.ki/.well-known/security.txt