# /.well-known/security.txt - Bettrails
# Standard: RFC 9116 - https://www.rfc-editor.org/rfc/rfc9116
# Public: https://bettrails.com/.well-known/security.txt

Contact: mailto:info@bettrails.com
Expires: 2027-12-31T23:59:59.000Z
Preferred-Languages: es, en
Canonical: https://bettrails.com/.well-known/security.txt

# Reporting policy
# Please report security vulnerabilities directly to the email above.
# We commit to acknowledging valid reports within 72 hours and to keeping
# the reporter updated through the resolution process.
#
# Scope: any subdomain of bettrails.com, the public API endpoints and the
# public dataset endpoint.
#
# Out of scope: social engineering, physical attacks, DoS/DDoS volume tests.