# Hubity Security Policy
# This file follows the security.txt standard (RFC 9116).

Contact: mailto:security@hubity.io
Contact: https://hubity.io/security
Preferred-Languages: en
Canonical: https://hubity.io/.well-known/security.txt
Policy: https://hubity.io/security
Expires: 2027-05-11T00:00:00.000Z

# Scope
# In scope: hubity.io, dev.hubity.io, and their API endpoints.
# Out of scope: third-party services, social engineering, denial of service.
# Researchers who report valid vulnerabilities are acknowledged, with permission.