# Security Disclosure — Vezraa
# https://vezraa.com

# Contact
Contact: mailto:udayakirantumma@gmail.com

# Disclosure Policy
# We follow coordinated disclosure:
# 1. Report vulnerabilities privately via email.
# 2. We acknowledge receipt within 72 hours.
# 3. We work to validate and remediate within 90 days.
# 4. Public disclosure only after fixes are deployed.

Policy: https://vezraa.com/security/disclosure-policy
Preferred-Languages: en

# Encryption
# For sensitive vulnerability details, please encrypt your report using our PGP key.
# Key ID: (setup pending — plaintext email is acceptable for initial contact)

Encryption: https://vezraa.com/.well-known/pgp-key.txt

# Canonical URL
Canonical: https://vezraa.com/.well-known/security.txt

# Expiry
Expires: 2027-07-01T00:00:00.000Z

# Acknowledgements
# We publicly thank researchers who responsibly disclose findings.
# See: https://vezraa.com/security/hall-of-fame