# =============================================================
#  AtlasBet — Vulnerability Disclosure
#  RFC 9116  (https://www.rfc-editor.org/rfc/rfc9116)
# =============================================================
#
#  We take security seriously. If you have discovered a security
#  issue affecting AtlasBet, please report it through the channels
#  below. Our team triages every report and acknowledges within
#  48 hours. Researchers acting in good faith under our policy
#  qualify for legal Safe Harbor — see /security for details.
#
# =============================================================

Contact: mailto:security@atlasbet.gg
Contact: https://atlasbet.gg/security

# Encrypted reports are strongly preferred for high-severity findings.
# Verify the key fingerprint on /security before encrypting.
Encryption: https://atlasbet.gg/.well-known/atlasbet-security.asc

# Public researcher recognition (Hall of Fame).
Acknowledgments: https://atlasbet.gg/bug-bounty#hall-of-fame

# Preferred languages, in priority order (BCP 47).
Preferred-Languages: en, es, pt

# Canonical location of this file.
Canonical: https://atlasbet.gg/.well-known/security.txt

# Full disclosure policy, scope, and rules of engagement.
Policy: https://atlasbet.gg/security

# Bug bounty program — paid rewards for valid reports.
Hiring: https://atlasbet.gg/bug-bounty

# This file is valid for one year. Re-fetched dates after
# the Expires field below should be considered out of policy.
Expires: 2027-04-26T00:00:00.000Z