# ForecastIQ Security Policy
# https://forecastiq.app/.well-known/security.txt
# Last updated: 2025-12-27

Contact: mailto:security@forecastiq.app
Expires: 2026-12-31T23:59:59.000Z
Preferred-Languages: en
Canonical: https://forecastiq.app/.well-known/security.txt

# Policy
# We take security seriously at ForecastIQ. If you discover a security 
# vulnerability, please report it responsibly.

# Scope
# - forecastiq.app and all subdomains
# - API endpoints
# - Authentication and authorization systems
# - Data storage and transmission

# Out of Scope
# - Social engineering attacks
# - Denial of service attacks
# - Spam or phishing

# Recognition
# We appreciate security researchers who help keep ForecastIQ safe.
# Responsible disclosure will be acknowledged.

# Response
# We aim to respond to security reports within 48 hours and will 
# keep you informed of our progress toward resolution.