# Vulnerability reports are welcome and will be acknowledged.
# Please give us a reasonable window to fix before public disclosure.

Contact: mailto:security@greeksview.com
Expires: 2027-08-03T05:20:14Z
Preferred-Languages: en
Canonical: https://greeksview.com/.well-known/security.txt
Policy: https://greeksview.com/security

# Out of scope: findings against a user's own browser storage. API keys are
# encrypted client-side with a non-extractable key and never leave the
# browser, so local access to an unlocked machine is not a server-side flaw.