# Burna AI - Vulnerability Disclosure
# https://www.rfc-editor.org/rfc/rfc9116

Contact: mailto:security@burna.ai
Expires: 2027-05-18T00:00:00.000Z
Preferred-Languages: en
Canonical: https://burna.ai/.well-known/security.txt
Policy: https://burna.ai/responsible-disclosure
Hiring: https://burna.ai/about

# Burna AI welcomes responsible disclosure of security vulnerabilities
# affecting our public website, the platform, or our infrastructure.
# We acknowledge reports within 2 business days and aim to remediate
# confirmed issues within 30 days where feasible. Coordinated public
# disclosure on resolution.
#
# For PGP-encrypted reports, request the current public key by email.
# Bug bounty program in development for 2027.