# MadeThis security contact (RFC 9116: https://www.rfc-editor.org/rfc/rfc9116)

Contact: mailto:support@madethis.com
Expires: 2027-09-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://www.madethis.com/.well-known/security.txt

# Reporting policy
#
# MadeThis does not operate a paid bug bounty program and does not pay for
# vulnerability reports, including reports submitted before a program was
# announced. We will not negotiate payment as a condition of disclosure.
#
# Reports that include the affected URL or endpoint and clear reproduction
# steps are reviewed and acknowledged. Reports without reproduction steps
# cannot be assessed.
#
# Email authentication configuration (SPF, DKIM, DMARC policy mode) is
# tracked internally and is not accepted as a vulnerability report.