# Xactus security contact information
# This file follows RFC 9116 (https://www.rfc-editor.org/rfc/rfc9116)
#
# Xactus does not authorize security testing of its systems, applications,
# or infrastructure without prior written approval. Unauthorized scanning,
# penetration testing, social engineering, or denial of service activity
# is prohibited.
#
# Xactus operates an invitation-only bug bounty program. Submitting a
# vulnerability report does not result in an invitation to the program,
# and unsolicited reports are not eligible for bounty rewards.
#
# Please submit vulnerability reports through our responsible disclosure
# page. For general security questions, contact security@xactus.com.

Contact: https://xactus.com/responsible-vulnerability-disclosure/
Contact: security@xactus.com
Preferred-Languages: en
Canonical: https://xactus.com/.well-known/security.txt
Canonical: https://xactus.com/security.txt
Expires: 2027-10-20T23:59:59Z