# OTNOS - vulnerability disclosure contact (RFC 9116)
# Report security issues in the OTNOS platform (otnos.com, api.otnos.com,
# the MCP server) to the address below. For vulnerabilities in OT products
# of other manufacturers, contact that manufacturer's PSIRT.

Contact: mailto:contact@otnos.com
Expires: 2027-09-30T00:00:00.000Z
Preferred-Languages: en, de
Canonical: https://otnos.com/.well-known/security.txt
Policy: https://otnos.com/security/vulnerability-management-policy

# We acknowledge reports within 5 working days and coordinate disclosure
# with the reporter. Good-faith research within the policy is welcome.