# Security contact information for Mallory AI (RFC 9116).
#
# Report a suspected vulnerability in the Mallory platform to the contacts
# below, in the listed order of preference. Please include reproduction steps
# and the affected host (mallory.ai, app.mallory.ai, or api.mallory.ai).
#
# This file is served from both mallory.ai (this repo) and app.mallory.ai
# (malloryai/web, at the same path) — researchers check the apex first, so
# both locations are listed as Canonical below. Keep the two files in sync.
#
# MAINTENANCE: `Expires` below is a hard requirement of RFC 9116 and must be
# refreshed before it lapses — scanners and researchers treat an expired
# security.txt as stale, which is worse than not publishing one. See MAL-5016.

Contact: mailto:security@mallory.ai
Contact: mailto:hello@mallory.ai
Expires: 2027-07-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://mallory.ai/.well-known/security.txt
Canonical: https://app.mallory.ai/.well-known/security.txt