# Reporting a vulnerability in RelayFlow.
#
# This contact is the VENDOR's, for defects in the RelayFlow software
# itself. If you are looking at a self-hosted appliance, the operator of
# that instance is a different party with a different contact; this file
# does not speak for them.

Contact: mailto:security@mail.relayflow.dev
Expires: 2027-08-31T23:59:59.000Z
Preferred-Languages: en, es
Policy: https://relayflow.dev/security

# We do not run a paid bug bounty. We do acknowledge within 3 business
# days, keep you informed, and credit you if you want the credit.
# Full policy and severity targets: https://relayflow.dev/security