# Security contact for Geniffy
# Geniffy Innovations Private Limited
# Format: RFC 9116 (https://www.rfc-editor.org/rfc/rfc9116)
#
# If you have found a vulnerability in Geniffy, please write to the address
# below. Read the policy first. We offer safe harbour for good faith research.
#
# MAINTAINER NOTES
#  - Expires below is a hard date. An expired security.txt is treated as
#    invalid by scanners and by most enterprise reviewers. Set a calendar
#    reminder for one month before it, and reissue.
#  - Verify in production that this file is served as text/plain and is not
#    swallowed by the SPA fallback that returns index.html for unknown paths.
#    Check both https://geniffy.com/.well-known/security.txt and the www host.
#  - Confirm the build actually ships the dot-directory. Some bundlers and some
#    S3 sync commands skip paths beginning with a dot.

Contact: mailto:security@geniffy.com
Expires: 2027-08-07T23:59:00.000Z
Preferred-Languages: en
Canonical: https://www.geniffy.com/.well-known/security.txt
Canonical: https://geniffy.com/.well-known/security.txt
Policy: https://www.geniffy.com/security/vulnerability-disclosure