# How to tell us about a security problem.
#
# We would rather hear it from you than from a customer, and we will not
# argue about scope with somebody who is doing us a favour.

Contact: mailto:security@lyntway.com
Preferred-Languages: en
Canonical: https://lyntway.com/.well-known/security.txt
Policy: https://lyntway.com/docs

# What we ask
#
# Tell us before you tell anyone else, and give us a reasonable window to
# fix it. Do not access, alter or retain data belonging to anybody else
# while proving a point — a description of the flaw is enough, and we will
# reproduce it ourselves.
#
# What we promise
#
# We will acknowledge within three working days, tell you what we found,
# and tell you when it is fixed. We will not threaten you with lawyers for
# reporting something in good faith, and we will credit you unless you
# would rather we did not.
#
# Worth knowing before you start
#
# The verifier and the command-line tools are standard library only, and
# the governing service runs as a static binary with no shell. Our
# dependency list is published at /.well-known/sbom.json — there are six,
# all in the hosted service, all for its database driver.