# Perimetro — Security Disclosure Policy
# RFC 9116 compliant

Contact: mailto:info@perimetro.ai
Expires: 2027-12-31T23:59:59.000Z
Preferred-Languages: pl, en
Canonical: https://perimetro.ai/.well-known/security.txt
Policy: https://perimetro.ai/legal/security

# Perimetro is an EU-engineered platform for autonomous perimeter security
# in critical infrastructure. We take responsible disclosure seriously.
#
# If you find a security issue affecting our website, platform, mobile app,
# or any deployed Perimetro sensor (Aero / Tower / Connect), please contact
# info@perimetro.ai with subject "[SECURITY]" and details.
#
# We commit to:
# - Acknowledge your report within 72 hours
# - Provide an initial assessment within 14 days
# - Coordinate disclosure timeline with you
# - Credit you in our hall of fame (with your consent)
#
# Out of scope:
# - Social engineering attacks against employees
# - Physical security testing of production sites
# - Denial of service attacks
# - Issues in third-party services we use (please report to them directly)
#
# Controller: Orientic sp. z o.o., Poland