# Grubless — security contact (RFC 9116)
#
# Kept as a static file rather than generated: it is read by scanners and
# researchers, and a machine-readable contact that only exists after a
# successful build is one that goes missing exactly when it is needed.
#
# Expires must stay in the future — RFC 9116 says a consumer should ignore a
# stale file, so an expired security.txt is worse than none. Renew annually.

Contact: mailto:security@grubless.io
Expires: 2027-08-11T00:00:00.000Z
Preferred-Languages: en
Canonical: https://grubless.io/.well-known/security.txt
Policy: https://grubless.io/security.html#disclosure