# © TALOS Group Pty Ltd, used under licence by TALOS Defence Pty Ltd.
#
# Hangar by TALOS Defence: how to report a security vulnerability (RFC 9116).
# Scope: gethangar.au and its subdomains, api.gethangar.au, the hangar
# command line, the run certificate verifier and the Hangar instance image.
# Acknowledgement within 1 business day. Fixes within 48 hours for an
# exploited or critical vulnerability and within 14 days otherwise.
# Coordinated disclosure after 90 days, or earlier by agreement.
# Good-faith research under the policy below has safe harbour.

Contact: mailto:security@gethangar.au
Expires: 2027-10-17T00:00:00Z
Preferred-Languages: en
Canonical: https://gethangar.au/.well-known/security.txt
Policy: https://gethangar.au/docs/security_advisories_and_maintenance