# Omitly security contact — RFC 9116
# Note: the Expires date must be kept under one year out; refresh it in CI or on
# each portal deploy. When signing this file is set up, publish the detached
# signature alongside it and add a Signature: line.
Contact: mailto:security@omitly.app
Canonical: https://security.omitly.app/.well-known/security.txt
Policy: https://security.omitly.app/disclosure
Preferred-Languages: en
Expires: 2027-01-01T00:00:00.000Z