# Security contact for evolutionshq.com and www.evolutionshq.com
# Evolutions — RFC 9116
#
# Reviewed semi-annually. Update Expires before it lapses: an expired file is
# treated as invalid by scanners and researchers, which is the single most
# common failure mode for security.txt in the wild.
#
# No Canonical field, deliberately. RFC 9116 section 2.5.2 states that multiple
# Canonical fields MUST NOT be interpreted as extending scope, and that once the
# field is present, a file retrieved from a URI not listed in it SHOULD NOT be
# trusted. This identical file is served from every Vercel preview hostname, so
# adding Canonical would create a fail-closed trust problem rather than solving
# the apex-vs-www question. The apex already 307s to www.

Contact: mailto:security@evolutionshq.com
Expires: 2027-01-31T23:59:59Z
Preferred-Languages: en