# Security contact and disclosure policy for scepnet.tech (RFC 9116).
#
# ScepNet operates private certificate authorities on behalf of its customers.
# Reports touching key custody, tenant isolation, certificate issuance or the
# SCEP relay are the ones we care most about — say so in the subject and we
# will pick them up first.
#
# Please do not test against another customer's tenant, do not attempt to
# enrol against a challenge that is not yours, and do not run denial-of-service
# or automated scanning traffic against the SCEP or OCSP endpoints — real
# network authentication depends on them. Everything else on the public surface
# is fair game, and we will not pursue anyone reporting in good faith.

Contact: mailto:support@scepnet.tech
Contact: https://scepnet.tech/trust.html#report
Expires: 2027-09-10T00:00:00.000Z
Preferred-Languages: en
Canonical: https://scepnet.tech/.well-known/security.txt
Policy: https://scepnet.tech/trust.html#report