# Attestd does not operate a paid bug bounty program.
# Informational scanner findings (missing optional headers, server banners,
# CSP completeness, public CORS on MCP) are not accepted as vulnerabilities.
Contact: mailto:support@attestd.io
Expires: 2027-10-03T23:59:59.000Z
Preferred-Languages: en
Canonical: https://attestd.io/.well-known/security.txt