# RFC 9116 — Security policy for localghost.co
# https://www.rfc-editor.org/rfc/rfc9116

Contact: mailto:security@localghost.co
Expires: 2027-10-01T00:00:00.000Z
Preferred-Languages: tr, en
Canonical: https://localghost.co/.well-known/security.txt
Policy: https://localghost.co/security

# We welcome responsible disclosure of security vulnerabilities.
# Email us before any public disclosure; we reply within 3 business days.
# Reproducible steps and the affected URL help us fix it faster.

# In scope:
# - localghost.co and its subdomains

# Please do not:
# - Access or modify other users' data
# - Degrade the service (load / DoS testing)
# - Use social engineering against our staff
# - Disclose the issue publicly before it is fixed