# Security contact for jmadhan.me — RFC 9116
# If you have found a vulnerability in this site, please report it privately.

Contact: mailto:hello@jmadhan.me
Contact: https://x.com/jmadhanai
Expires: 2027-08-18T00:00:00.000Z
Preferred-Languages: en
Canonical: https://jmadhan.me/.well-known/security.txt
Policy: https://jmadhan.me/blog/why-i-never-name-the-company

# I do security research myself and disclose to others under the same terms
# I am asking for here: report privately, give me a reasonable window to fix,
# and I will credit you in the write-up if you would like.
#
# In scope:   jmadhan.me and its subdomains
# Out of scope: third-party services linked from this site (GitHub, LinkedIn,
#               YouTube, X), volumetric DoS, and social engineering.