# Corgent (Malango Tech UG (haftungsbeschränkt)) security contact, RFC 9116.
# Served identically at corgent.ai, app.corgent.ai and api.corgent.ai.
# Renew "Expires" before it passes: server/tests/unit/securityTxt.test.ts fails 30 days ahead.

Contact: mailto:security@corgent.ai
Contact: https://corgent.ai/security/vulnerability-disclosure
Expires: 2027-10-13T00:00:00.000Z
Preferred-Languages: de, en
Canonical: https://corgent.ai/.well-known/security.txt
Canonical: https://app.corgent.ai/.well-known/security.txt
Canonical: https://api.corgent.ai/.well-known/security.txt
Policy: https://corgent.ai/security/vulnerability-disclosure
Acknowledgments: https://corgent.ai/security/vulnerability-disclosure#danksagung

# Scope, safe harbour and response times are in the policy above. Please do not test
# denial of service, social engineering or third-party services (Supabase, Stripe,
# OpenRouter and others), and do not access data of other customers.