# Tidehawk vulnerability disclosure contact (RFC 9116).
# Served verbatim from public/ — remember to extend Expires before it lapses;
# an expired security.txt is treated as no security.txt at all.
#
# Canonical is the MARKETING apex (SITE_BASE_URL / lib/site-origin.ts), matching
# the robots.txt Sitemap: line and every sitemap.xml entry — not the app host.
Contact: mailto:security@tidehawk.co
Expires: 2027-09-13T00:00:00.000Z
Preferred-Languages: en
Canonical: https://tidehawk.co/.well-known/security.txt