# Limonene (Zed Axis Systems LLC) — vulnerability disclosure
# https://limonene.app

Contact: mailto:hello@limonene.app
Expires: 2027-09-22T00:00:00.000Z
Preferred-Languages: en, ar
Canonical: https://limonene.app/.well-known/security.txt
Policy: https://limonene.app/security

# Please include: the affected URL or endpoint, the steps to reproduce, and
# what an attacker could actually do with it. We read every report and reply.
#
# We are a small team and do not run a paid bug-bounty programme, so we cannot
# offer payment for reports. We are glad to credit researchers who want it.
#
# Please do not: access, modify or retain data belonging to any seller other
# than a test account you control; run denial-of-service or spam tests; or use
# automated scanning that degrades service for our customers.