# Drazill — Vulnerability Disclosure Program (RFC 9116)
#
# The full policy (scope, safe harbor, response targets) lives at the Policy URL
# below and is single-sourced from SECURITY.md in the Drazill repository. This
# file only points at it — it never restates or extends the policy.
#
# Please read the policy before testing. Denial-of-service testing, accessing
# another user's data, and automated high-volume scans against production
# without written approval are out of scope.

Contact: mailto:security@drazill.com
Expires: 2027-07-01T00:00:00.000Z
Policy: https://drazill.com/security
Preferred-Languages: en, fr
Canonical: https://drazill.com/.well-known/security.txt