# Leanroute security disclosure — RFC 9116
Contact: mailto:security@leanroute.dev
Expires: 2027-08-01T00:00:00.000Z
Preferred-Languages: en
Policy: https://leanroute.dev/security
Canonical: https://leanroute.dev/.well-known/security.txt

# Safe-harbor terms:
# - Good-faith research is welcome. Please do not run denial-of-service
#   tests, exfiltrate data beyond proof-of-concept, or access other
#   customers' data.
# - Default coordinated-disclosure window: 90 days from acknowledgment.
#   We can negotiate longer for issues that require infrastructure work.
# - We acknowledge within one business day and target a triage decision
#   within five.