# Signal Studio / NeuraCrypt
# https://securitytxt.org/

Contact: https://eeg.studio/security/#report
Contact: mailto:security@eeg.studio
Expires: 2027-09-03T00:00:00.000Z
Preferred-Languages: en, fr
Canonical: https://eeg.studio/.well-known/security.txt
Policy: https://eeg.studio/security/
Acknowledgments: https://eeg.studio/security/#thanks

# What we most want to hear about, in order:
#   1. Anything letting one account act as another
#   2. Anything letting a published extension escape its stated behaviour
#   3. Anything exposing a user's email or account identifier
#   4. Anything letting an unapproved marketplace entry become visible
#
# Please do not run automated scanners against the production site.
# Ask and we will give you what you need to test properly.