# Element Digital, and this website.
#
# RFC 9116. If you have found a security problem in elementdigital.com.au or
# in something else we run, this is where to send it, and
# https://elementdigital.com.au/security-policy/ is what we commit to in
# return: response times, credit, and safe harbour for good-faith research.
#
# Read the policy before testing. In particular: we are a consultancy, and
# our clients' systems are NOT ours to authorise testing against.
#
# Expires is checked in CI, so this file cannot quietly go stale while the
# site is still being deployed. See .github/workflows/deploy.yml.

# Both reach the same people. The elementdigital.com.au address is listed
# first because it is the one somebody looking at this domain would guess,
# and RFC 9116 treats the order as preference.
Contact: mailto:security@elementdigital.com.au
Contact: mailto:security@arcio.au
Expires: 2027-03-31T23:59:59.000Z
Preferred-Languages: en
Canonical: https://elementdigital.com.au/.well-known/security.txt
Policy: https://elementdigital.com.au/security-policy/