# https://ihqmail.com/.well-known/security.txt
# Security Policy for iHQmail

Contact: mailto:security@ihqmail.com
Expires: 2027-01-29T00:00:00.000Z
Preferred-Languages: en
Canonical: https://ihqmail.com/.well-known/security.txt
Policy: https://ihqmail.com/pages/security-policy.html

# Acknowledgments
# We recognize security researchers who help keep iHQmail secure.
# Hall of Fame: https://ihqmail.com/security/hall-of-fame

# Scope
# In-scope: *.ihqmail.com web applications and APIs
# Out-of-scope: Third-party services, social engineering, physical attacks

# Disclosure Policy
# We follow responsible disclosure practices.
# Please allow 90 days for vulnerability remediation before public disclosure.

# Bug Bounty
# We offer competitive rewards for qualifying vulnerabilities.
# Rewards range from $50 - $5,000 depending on severity.