# O3 Security — security.txt (RFC 9116)
#
# If you have found a security issue in the O3 Security website or platform,
# please contact us using the channels below. We respond, we coordinate, and
# we do not surprise researchers with legal threats.

Contact: mailto:hello@o3.security
Contact: https://o3.security/contact-us
Expires: 2027-06-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://o3.security/.well-known/security.txt
Policy: https://o3.security/security-policy

# If you are reporting an issue that involves customer data, please mark the
# email subject with [URGENT]. Our on-call security engineer will respond within
# one business day. Critical issues are acknowledged within four hours.
#
# We support coordinated disclosure. Default coordination window is 90 days
# from acknowledgement. We will publicly credit researchers (with consent) on
# our blog and security advisories.