# Reporting a security issue with Medlar
#
# Send it here and you will get a human, not a ticket robot. We are a small
# company; we would much rather hear from you first.

Contact: mailto:hello@medlar.app
Expires: 2027-04-20T16:00:00Z
Preferred-Languages: en, tr
Canonical: https://medlar.app/.well-known/security.txt
Policy: https://medlar.app/security

# What we ask
#
# Test only against accounts and workspaces you own. Do not run automated
# scanning that degrades the service for other people, do not access another
# customer's data, and if you reach someone else's data by accident, stop and
# tell us rather than exploring.
#
# What you get
#
# An acknowledgement within 3 working days and an assessment within 10. We
# will not take legal action over good-faith research that follows the above.
# We have no bug bounty yet, so we cannot promise money — we can promise
# credit, and an honest answer about what we fixed and when.