# SandboxAPIs — https://sandboxapis.dev
# RFC 9116. Reports go to one mailbox, which is the same address /about,
# /terms and /privacy name; there is no bug bounty and no form.
# The expiry below is checked by apps/web/src/lib/security-txt.test.ts, which
# fails the build 30 days before it passes — a stale security.txt is worse
# than none, because it tells a finder the address stopped being read.

Contact: mailto:team@sandboxapis.dev
Expires: 2027-10-03T00:00:00.000Z
Preferred-Languages: en
Canonical: https://sandboxapis.dev/.well-known/security.txt
Policy: https://sandboxapis.dev/privacy