# 2Atomic vulnerability reporting (RFC 9116).
# Expires is mandatory and must stay in the future; renewal is an owned item in
# docs/2ATOMIC_CRA_REPORTING_RUNBOOK.md. No Encryption field: we publish no
# long-term PGP key, and the policy says how to encrypt without one.

Contact: mailto:security@2atomic.com
Expires: 2027-06-30T23:59:59Z
Policy: https://2atomic.com/security/disclosure
Preferred-Languages: en
Canonical: https://2atomic.com/.well-known/security.txt