Contact: mailto:security@supercatch.com
Contact: https://beta.supercatch.com/security/report
Expires: 2026-10-19T00:00:00.000Z
Encryption: https://beta.supercatch.com/pgp-key.txt
Preferred-Languages: en
Canonical: https://beta.supercatch.com/.well-known/security.txt

# Security Policy
# 
# SuperCatch takes security seriously. If you discover a security
# vulnerability, please report it responsibly.
#
# Reporting Process:
# 1. Email security@supercatch.com with details
# 2. Include steps to reproduce
# 3. Wait for acknowledgment (within 48 hours)
# 4. Do not publicly disclose until resolved
#
# Scope:
# - beta.supercatch.com (marketplace)
# - v1.supercatch.com (seller dashboard)
# - api.supercatch.com (API endpoints)
#
# Out of Scope:
# - Social engineering
# - Physical attacks
# - DDoS attacks
#
# Response Time:
# - Critical: 24 hours
# - High: 72 hours
# - Medium: 7 days
# - Low: 30 days
#
# Bug Bounty:
# We offer rewards for qualifying security vulnerabilities.
# Contact us for details about our bug bounty program.
#
# Thank you for helping keep SuperCatch secure!