Files
zeekayandHanzo Dev 490f52abb2 say where to send a vulnerability, not just what we claim to protect
The security page listed controls and named no address, so a stranger who found
a hole had to guess one or post it publicly. The RFC 9116 file is the same fact
in the form a scanner reads first; a site without it gets reported to whatever
address someone can guess, or not at all.

The compliance claims already on this page are left exactly as they were. They
are a separate question from whether a finder can reach us.

Co-authored-by: Hanzo Dev <[email protected]>
2026-08-14 19:08:06 -07:00

12 lines
431 B
Plaintext

# Hanzo AI — how to report a security problem.
#
# RFC 9116. Machine-readable on purpose: scanners and researchers look here
# first, and a site without this file gets reported to whatever address someone
# can guess, or not at all.
Contact: mailto:[email protected]
Expires: 2027-08-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://hanzo.industries/.well-known/security.txt
Policy: https://hanzo.industries/security