# Cyber Toolbox — security policy
# https://www.rfc-editor.org/rfc/rfc9116

Contact: mailto:security@cybertoolbox.io
Contact: mailto:hello@cybertoolbox.io
Expires: 2027-05-02T00:00:00Z
Preferred-Languages: en
Canonical: https://cybertoolbox.io/.well-known/security.txt
Policy: https://cybertoolbox.io/.well-known/security.txt

# Scope: cybertoolbox.io and any subdomains operated by Cyber Toolbox Ltd.
# Out of scope: third-party platforms (Cloudflare Pages dashboard, GitHub repos),
# theoretical issues without a working proof-of-concept, social engineering of
# staff, and denial-of-service attacks.
#
# Please give us a reasonable window to respond and remediate before any
# public disclosure. We will acknowledge reports within two business days.