# spendctl security contact (RFC 9116). Report vulnerabilities privately; do not post publicly.
# Scope and response times: https://spendctl.dev/docs/trust/#vulnerability-disclosure
Contact: mailto:security@spendctl.dev
Expires: 2027-10-28T00:00:00.000Z
Preferred-Languages: en, ja
Canonical: https://spendctl.dev/.well-known/security.txt
Policy: https://spendctl.dev/docs/trust/#vulnerability-disclosure
Policy: https://spendctl.dev/ja/docs/trust/#%E8%84%86%E5%BC%B1%E6%80%A7%E3%81%AE%E5%A0%B1%E5%91%8A