# https://letx.app/.well-known/security.txt, RFC 9116
# This path previously returned the SPA shell with a 200, so scanners and
# researchers looking for a disclosure address found a marketing page instead.

Contact: mailto:support@letx.app
Expires: 2027-08-07T00:00:00.000Z
Preferred-Languages: en
Canonical: https://letx.app/.well-known/security.txt
Policy: https://letx.app/security/

# Please report privately and give us a reasonable window to ship a fix before
# disclosing. We do not run a paid bounty; we do credit reporters who ask for it.