# oowl — security contact, per RFC 9116 (https://www.rfc-editor.org/rfc/rfc9116.html)
# If you have found a security issue in this site or in a system we operate,
# please tell us. We will not pursue legal action against good-faith research
# that respects the guidance below.

Contact: mailto:security@oowl.com.au
Contact: https://oowl.com.au/contact
Expires: 2027-09-30T00:00:00.000Z
Preferred-Languages: en
Canonical: https://oowl.com.au/.well-known/security.txt
Policy: https://oowl.com.au/.well-known/security.txt

# Good-faith research guidance
#   - Report promptly and give us reasonable time to fix before disclosing.
#   - Do not access, modify or exfiltrate data that is not yours.
#   - No denial-of-service, no spam, no social engineering of our staff or clients.
#   - Automated scanning: keep it low-rate and identify yourself in the User-Agent.
#
# We have no bug bounty programme and cannot offer payment. We will credit you
# if you would like to be credited.
#
# oowl holds no security certifications or accreditations.