# OrcaVaults by FlowOrca Ltd
# RFC 9116 security.txt
# https://www.rfc-editor.org/rfc/rfc9116

Contact: mailto:security@floworca.com
Contact: https://www.floworca.com/contact

Expires: 2027-04-29T00:00:00.000Z

Preferred-Languages: en

Canonical: https://www.floworca.com/.well-known/security.txt

Policy: https://www.floworca.com/security/disclosure-policy

# In scope:
#   - www.floworca.com and trust.floworca.com
#   - OrcaVaults software (current release branch)
#   - FlowOrca-published Docker images and installer packages
#
# Out of scope:
#   - Customer-deployed instances of OrcaVaults (those belong to the Customer)
#   - Volumetric / DoS testing
#   - Social engineering of staff or Customers
#
# Safe harbour: FlowOrca will not initiate legal action against
# researchers acting in good faith under our published disclosure policy.