# MARKST LTD — Responsible Disclosure
# Please report security issues to the contact below. We aim to acknowledge
# reports within 48 hours and share a remediation plan within 14 days.

Contact: mailto:security@markst.com
Contact: https://markst.com/trust#responsible-disclosure
Expires: 2027-04-18T00:00:00.000Z
Preferred-Languages: en
Canonical: https://markst.com/.well-known/security.txt
Policy: https://markst.com/trust#responsible-disclosure
Hiring: https://markst.com/

# Scope: any issue affecting the Verus platform (markst.com and
# future subdomains — beta.markst.com, app.markst.com) or the Verus
# API. status.markst.com is not yet provisioned; incident status is
# published via email to affected customers until the public status
# page is live (planned for Q3 2026).
#
# Safe-harbour: good-faith research conducted under this policy will not
# result in legal action by MARKST LTD. Please do not access data
# belonging to other customers, run automated scanners against
# production, or disrupt service. Use test accounts and a short-lived,
# labelled user-agent when probing.