Contact: mailto:security@offlane.xyz
Contact: https://twitter.com/offlane
Expires: 2027-08-03T00:00:00.000Z
Preferred-Languages: en
Canonical: https://offlane.xyz/.well-known/security.txt

# If you find a security issue on OFFLANE, please email
# security@offlane.xyz with a short description, a proof-of-
# concept, and the affected URL. We aim to acknowledge within
# 48 hours and patch within 7 days for critical issues.

# Scope: offlane.xyz and all subdomains (*.offlane.xyz).
# Out of scope: third-party embeds (Twitch, YouTube, Kick,
# Bilibili) — report those to the respective provider.

# We do not currently run a paid bug bounty. We will, however,
# publicly credit researchers (with permission) in the changelog
# and send a thank-you email + a year of our (forthcoming)
# newsletter sponsorship.