Contact: mailto:security@bcited.ai
Expires: 2027-11-02T14:13:41Z
Preferred-Languages: en
Canonical: https://bcited.ai/.well-known/security.txt

# Coordinated disclosure: please give us a reasonable window
# (we aim to triage within 48h) before public disclosure.
# Out of scope: brute-force / DoS / spam reports against /api/scan
# (rate-limited by design), social engineering of staff, physical
# attacks, automated scanner output without a reproducible PoC.