# Machine-readable security contact per RFC 9116.
#
# No mailto: on purpose — the only published address (privacy@) is for
# data requests, not security reports. RFC 9116
# accepts any URI in Contact, listed in order of preference. Neither route
# accepts attachments; /security/ explains how to hand over a proof of
# concept that won't fit in a text box.
#
# Expires must stay in the future — a stale security.txt reads as
# unmaintained to researchers and scanners. Renew annually.

Contact: https://habitusmind.com/#request-access
Contact: https://wa.me/60122104914
Expires: 2027-09-05T00:00:00.000Z
Policy: https://habitusmind.com/security/
Preferred-Languages: en, ms
Canonical: https://habitusmind.com/.well-known/security.txt