Contact: mailto:security@carryon.us
Contact: https://www.carryon.us/security
Expires: 2027-06-01T00:00:00Z
Preferred-Languages: en
Canonical: https://www.carryon.us/.well-known/security.txt
Policy: https://www.carryon.us/security

# Responsible disclosure
# We take vulnerability reports seriously. If you discover a security issue,
# please email security@carryon.us with a clear description and steps to
# reproduce. We commit to acknowledging your report within 72 hours and
# providing a fix-or-status update within 14 days. Coordinated disclosure
# preferred. Do not test against production accounts that aren't yours.