Contact: mailto:security@rebaar.in
Expires: 2027-06-01T00:00:00.000Z
Preferred-Languages: en, hi
Canonical: https://rebaar.in/.well-known/security.txt
Policy: https://rebaar.in/security
Acknowledgments: https://rebaar.in/security#acknowledgments

# We welcome reports of security vulnerabilities in Rebaar.
# Please email security@rebaar.in. We respond within 1 business day.
#
# Please DO NOT:
#   - Run automated scanners against production (this triggers the WAF and
#     hits our rate limits, blocking legitimate users)
#   - Access, modify, or delete data that doesn't belong to you
#   - Run denial-of-service tests
#   - Social-engineer Rebaar staff or customers
#
# We commit to:
#   - Acknowledge your report within 24 hours
#   - Update you within 5 business days with our assessment
#   - Not pursue legal action against good-faith security research
#   - Credit you in our acknowledgments page (with your consent)
#
# Rebaar is a single-founder, bootstrapped company. We do not have a paid
# bug bounty programme yet, but we will recognise valid reports publicly
# and may offer a free year of Growth plan as a token of thanks.