# Veristep — responsible disclosure (RFC 9116)
Contact: mailto:security@veristep.app
Expires: 2027-09-10T00:00:00.000Z
Preferred-Languages: en
Canonical: https://veristep.app/.well-known/security.txt
Policy: https://veristep.app/trust
# Report suspected vulnerabilities privately to the contact above. We
# investigate every report, and every access in Veristep is permanently
# audited — including ours. security@ forwards to the founder until a
# dedicated mailbox exists.