# OpenAlly — security contact (RFC 9116)
#
# This file exists so someone who finds a vulnerability in the OpenAlly app,
# this website, or our published endpoints has one obvious, machine-readable
# place to look. Before it, a shipped mobile app had no vulnerability-report
# path at all.
#
# Expires is deliberate, not decoration: RFC 9116 requires it, and a stale
# security.txt is worse than none because it advertises a channel nobody is
# committed to reading. Renew it before the date below.

Contact: mailto:support@openally.ai
Expires: 2027-07-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://openally.ai/.well-known/security.txt
Policy: https://openally.ai/security