Contact: mailto:security@clevername.net
Expires: 2027-09-04T00:00:00.000Z
Preferred-Languages: en
Policy: https://clevername.net/security
Canonical: https://clevername.net/.well-known/security.txt

# Responsible Disclosure
# We ask that you:
# - Give us reasonable time to investigate and fix (90 days) before public disclosure
# - Avoid accessing or modifying other users' data
# - Act in good faith
#
# In scope: clevername.net, hub-core API (api.clevername.net), dev.clevername.net
# Out of scope: denial-of-service, social engineering, physical attacks
#
# We will acknowledge reports within 5 business days and credit researchers
# in our security acknowledgments page upon request.