# Agentic Fluxus — security disclosure policy
# https://www.rfc-editor.org/rfc/rfc9116
# Last updated: 2026-05-05

Contact: mailto:security@agenticfluxus.com
Contact: https://agenticfluxus.com/contact
Expires: 2027-05-05T00:00:00.000Z
Encryption: https://agenticfluxus.com/.well-known/pgp-key.txt
Preferred-Languages: en, nl, de
Canonical: https://agenticfluxus.com/.well-known/security.txt
Policy: https://agenticfluxus.com/trust
Hiring: https://agenticfluxus.com/build-with-us

# We welcome reports from independent researchers. Please follow the
# responsible disclosure rules at https://agenticfluxus.com/trust :
#
#   1. Email security@agenticfluxus.com with reproduction steps.
#   2. Don't access data you weren't authorised to see.
#   3. Don't run automated scans against production at scale.
#   4. Give us 90 days to fix before public disclosure.
#
# We won't pursue legal action against good-faith disclosure that
# follows these rules. Bounties at our discretion based on severity.