Coordinated Vulnerability Disclosure Policy

Status: TODO

Contact

TODO: security@your-domain.example

Public discovery

TODO: publish /.well-known/security.txt.

Minimum policy content

• supported languages
• preferred contact method
• encryption/public key if used
• acknowledgement target
• disclosure expectations
• supported product versions