# BestCoder Vulnerability Disclosure Programme (RFC 9116)

Contact: mailto:security@bestcoder.app
Contact: https://bestcoder.app/legal/security
Expires: 2027-04-28T00:00:00Z
Encryption: https://bestcoder.app/.well-known/bestcoder-security.pgp
Acknowledgments: https://bestcoder.app/legal/security#acknowledgments
Preferred-Languages: en, fr
Canonical: https://bestcoder.app/.well-known/security.txt
Policy: https://bestcoder.app/legal/security
Hiring: https://bestcoder.app/careers

# Reporting guidelines:
#   - Email a clear, reproducible PoC.
#   - Allow 72 hours for first acknowledgement.
#   - Coordinate public disclosure with us. Critical 7d / High 30d / Medium 90d.
#   - Do not pivot, scrape, or exfiltrate beyond what is needed to demonstrate impact.
#
# We do not pursue legal action against researchers acting in good faith
# under this policy.