# One Degree AI Pte. Ltd. — vulnerability disclosure
# Format: RFC 9116  (https://www.rfc-editor.org/rfc/rfc9116)
#
# EDIT before going live:
#   - Replace the domain and email addresses with your real ones
#   - Set Expires to a date less than one year out, and diarise renewing it
#     (an expired security.txt looks worse than not having one)

Contact: mailto:security@onedegreeai.com
Contact: https://onedegreeai.com/contact.html
Expires: 2027-08-13T00:00:00.000Z
Preferred-Languages: en
Canonical: https://onedegreeai.com/.well-known/security.txt
Policy: https://onedegreeai.com/terms.html

# If you have found a vulnerability in our website or infrastructure, we want
# to hear about it and we will not pursue you for reporting it in good faith.
#
# Please:
#   - Give us a reasonable window to fix it before disclosing publicly
#   - Avoid accessing, modifying or deleting data that is not your own
#   - Avoid denial-of-service testing and social engineering of our staff
#   - Include enough detail for us to reproduce the issue
#
# We aim to acknowledge reports within 2 working days.