# Artistplus security contact (RFC 9116)
#
# The human-readable version of this file, including what to put in a report,
# our acknowledgement window, and the safe-harbour terms, lives at:
#   https://artistplus.io/security
#
# Expires is a HARD requirement of RFC 9116 and scanners treat an expired file
# as no file at all. RFC 9116 section 2.5.5 asks for less than a year, and a
# year-out value is a field that decays silently, so this one is six months.
# Refresh it, and the Contact address, in the same change that touches
# components/marketing/company/security-content.ts.
#
# This file names nothing but an address we want used. No vendor, no host but
# our own apex, no personnel, no version, no internal path. Keep it that way.

Contact: mailto:security@artistplus.io
Contact: https://artistplus.io/security#disclosure
Expires: 2027-02-06T00:00:00.000Z
Preferred-Languages: en
Canonical: https://artistplus.io/.well-known/security.txt
Policy: https://artistplus.io/security#disclosure