# Druma vulnerability disclosure. RFC 9116.
# One contact on purpose: the source repository is private, so GitHub's
# advisory flow 404s for anyone outside it and is not a usable channel.
# Full policy, scope and testing rules: https://druma.io/security

Contact: mailto:security@druma.io
Expires: 2027-09-02T00:00:00.000Z
Preferred-Languages: en, nl, ro
Canonical: https://druma.io/.well-known/security.txt
Policy: https://druma.io/security

# Please test against your own tenant only. Druma is multi-tenant and carries
# live freight, driver and invoicing data for operating hauliers.