# Oil Flow LLC — Vulnerability Disclosure (customer web portal)
#
# Found a security issue with Oil Flow? Email security@getoilflow.com.
# We appreciate responsible disclosure — please give us reasonable time
# to investigate and remediate before any public disclosure.
#
# Out of scope: denial-of-service testing, social-engineering attacks
# against staff or servicemen, and anything that touches accounts you
# do not own.
#
# Per RFC 9116 the Expires field below MUST be kept current.
# Rotate on or before the date listed.
#
# Sibling files (keep in sync):
#   apps/serviceman-web/public/.well-known/security.txt
#   apps/admin/public/.well-known/security.txt

Contact: mailto:security@getoilflow.com
Expires: 2027-06-24T00:00:00.000Z
Preferred-Languages: en
Canonical: https://getoilflow.com/.well-known/security.txt