# Lead16 Security Policy
# https://securitytxt.org/

Contact: mailto:security@lead16.com
Expires: 2027-02-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://lead16.com/.well-known/security.txt

# Security Policy
Policy: https://lead16.com/security-policy

# We appreciate responsible disclosure of security vulnerabilities.
# Please report any security issues to security@lead16.com
# We aim to respond within 48 hours and will work with you to
# understand and address any issues.

# Bug Bounty
# We currently do not have a formal bug bounty program,
# but we recognize and thank security researchers who
# responsibly disclose vulnerabilities.

# Acknowledgments
# Security researchers who have helped improve Lead16:
# - Matt Hesketh (February 2026 security audit)