# BTM Security - Security.txt
# Standard: RFC 9116 (https://www.rfc-editor.org/rfc/rfc9116)
# Canonical URL: https://www.btmsec.com/security.txt

Contact: mailto:security@btmsec.com
Contact: https://www.btmsec.com/contact
Expires: 2027-12-31T23:59:59.000Z
Encryption: https://www.btmsec.com/contact
Preferred-Languages: en
Canonical: https://www.btmsec.com/.well-known/security.txt
Canonical: https://www.btmsec.com/security.txt
Policy: https://www.btmsec.com/vulnerability-disclosure
Hiring: https://www.btmsec.com/careers
Acknowledgments: https://www.btmsec.com/vulnerability-disclosure#hall-of-fame

# Verification Methods & Reporting Guidelines:
# 1. Reports must include target URL, impacted endpoint, and benign Proof of Concept (PoC).
# 2. Provide detailed step-by-step reproduction instructions and sample HTTP request/response logs.
# 3. Only non-destructive testing is authorized; do not access or destroy client/user data.
# 4. Email reports to security@btmsec.com or submit via https://www.btmsec.com/contact.
# 5. Response SLA: We acknowledge submissions within 1 business day.