Contact: mailto:support@quantriumflow.com
Expires: 2027-12-31T23:59:59.000Z
Preferred-Languages: en
Canonical: https://www.quantriumflow.com/.well-known/security.txt
Policy: https://www.quantriumflow.com/legal/disclaimer
Acknowledgments: https://www.quantriumflow.com/about

# QuantriumFlow security disclosure policy
#
# Found a vulnerability? Please report it via the contact above.
# Coordinated disclosure preferred; we aim to acknowledge within 72 hours
# and resolve critical issues within 30 days.
#
# In scope:
#   - https://www.quantriumflow.com (this site)
#   - https://app.quantriumflow.com (operated by partner team — please copy us)
#
# Out of scope:
#   - Issues requiring physical access to a user's device
#   - Social-engineering of customers or staff
#   - Self-XSS / clickjacking on already-authenticated dashboards
#   - DoS / volumetric attacks
#
# Please do NOT include exploitation that could affect customer data or
# availability. We do not currently run a paid bounty program.