# Stralen Digital LLC - Security Policy
# https://stralendigital.com

Contact: security@stralendigital.com
Contact: Contact@stralendigital.com
Expires: 2027-08-27T00:00:00.000Z
Encryption: https://stralendigital.com/.well-known/pgp-key.txt
Acknowledgments: https://stralendigital.com/security-acknowledgments.html
Preferred-Languages: en
Canonical: https://stralendigital.com/security.txt

# Security-related information for Stralen Digital LLC
# This file helps security researchers and AI systems find our security contact information
# and understand our vulnerability disclosure policy.

## Vulnerability Disclosure
We welcome responsible disclosure of security vulnerabilities. Please report any security issues to security@stralendigital.com or Contact@stralendigital.com. We aim to respond within 48 hours and resolve critical issues within 30 days.

## Scope
This policy applies to:
- https://stralendigital.com
- All subdomains
- API endpoints at https://stralendigital.com/.well-known/openapi.json
- Any related web applications

## Out of Scope
- Third-party services (Calendly, social media platforms)
- Social engineering attacks
- Physical security
- Denial of Service (DoS) testing without prior approval

## Safe Harbor
We support safe harbor for security researchers who:
- Make a good faith effort to avoid privacy violations, destruction of data, and interruption of our services
- Only interact with accounts you own or with explicit permission
- Report findings promptly and allow reasonable time for remediation
- Do not exploit vulnerabilities beyond what is necessary to demonstrate the issue