# Emberline Studio — security contact
#
# RFC 9116. If you have found a vulnerability in this site, the client portal
# at portal.getemberline.com, or any site we host, this is where to send it.
#
# There is no bug bounty and no payment. There is a person who reads this
# address, will answer you, and will fix the problem. Reports are welcome from
# anyone, including people who found it by accident.

Contact: mailto:contact@getemberline.com
Contact: mailto:security@getemberline.com
Expires: 2027-09-07T00:00:00.000Z
Preferred-Languages: en
Canonical: https://getemberline.com/.well-known/security.txt
Policy: https://getemberline.com/privacy

# What we ask
#
#   Give us a reasonable chance to fix it before publishing.
#   Do not access, change or delete data that is not yours. If you can prove
#     an issue with a single harmless request, stop there.
#   Do not run denial-of-service or spam tests against production. These are
#     live small businesses, and their booking forms are how they get paid.
#   Automated scanning is fine. Automated exploitation is not.
#
# What we will do
#
#   Acknowledge within 3 business days.
#   Tell you what we found and when it is fixed.
#   Credit you if you want it, and not if you do not.
#   Never pursue legal action against someone who followed the above in
#     good faith.