# security.txt for appcrane.dev — RFC 9116
#
# AppCrane is open source. The code behind this site's product lives at
# https://github.com/gitayg/appCrane, and the MCP server at
# https://github.com/gitayg/appcrane-mcp. Both are AGPL-3.0; a separate
# commercial licence covers running private modifications as a service.
#
# There is no appcrane.dev mailbox, so no mailto: is listed below rather than
# an address that bounces. The Contact URL is this site's own form, which
# reaches the maintainer; start your note with "Security report".
#
# We do not publish a PGP key. There is deliberately no Encryption field
# below rather than a stale key nobody holds. If a report needs encrypted
# transport, send a first message with no technical detail in it and we will
# agree a channel before you send anything sensitive.
#
# There is no Policy or Acknowledgments field: appcrane.dev publishes no
# disclosure policy page and no advisory list today, and RFC 9116 asks for a
# URL that resolves, not a placeholder.

Contact: https://appcrane.dev/contact.html
Expires: 2027-10-01T23:59:59.000Z
Preferred-Languages: en, he
Canonical: https://appcrane.dev/.well-known/security.txt