# Cabal-Hunter — how to report a security issue.
# We are a small operation; you will get a human, not a ticket queue.

Contact: mailto:paulf280@gmail.com
Expires: 2027-02-11T00:00:00.000Z
Preferred-Languages: en
Canonical: https://cabal-hunter.com/.well-known/security.txt

# No bug bounty and no cash reward — we would rather say so plainly than
# imply one. Report anything that exposes customer API keys, purchase
# records or scan history, or that lets a caller bypass metering.
#
# Out of scope: findings about the RISK VERDICTS themselves. That a token
# scores lower or higher than you expect is a measurement disagreement, and
# we would genuinely like to hear it — but send that to the feedback box at
# https://cabal-hunter.com/#feedback rather than here.