Contact: mailto:security@buyka.io
Expires: 2027-12-31T23:59:59Z
Preferred-Languages: en, ru
Canonical: https://buyka.io/.well-known/security.txt
Policy: https://buyka.io/security-policy
Acknowledgments: https://buyka.io/security-acks
Encryption: https://buyka.io/pgp-key.txt
Hiring: https://buyka.io/careers

# Bug bounty roadmap: HackerOne private programme, Phase 2 (TZ §13.5).
# Plan & gate: docs/security/bug-bounty-roadmap.md
# Disclosure: 90 days after report or upon coordinated public release.
#
# This file follows RFC 9116. The PGP key URL is a placeholder until the
# key is published; reports are accepted unencrypted at security@buyka.io
# in the meantime.