Contact: mailto:security@haiec.com
Expires: 2027-01-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://haiec.com/.well-known/security.txt
Policy: https://haiec.com/security-policy
Acknowledgments: https://haiec.com/security-acknowledgments

# Security Policy

We take security seriously at HAIEC. If you discover a security vulnerability, please report it to us responsibly.

## Reporting a Vulnerability

Please email security@haiec.com with:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Your contact information (optional)

## Response Timeline

- Initial response: Within 24 hours
- Status update: Within 72 hours
- Resolution timeline: Depends on severity

## Scope

In scope:
- haiec.com and all subdomains
- API endpoints
- Authentication systems
- Data handling

Out of scope:
- Social engineering attacks
- Physical attacks
- Third-party services

## Safe Harbor

We support responsible disclosure and will not pursue legal action against researchers who:
- Make a good faith effort to avoid privacy violations
- Do not exploit vulnerabilities beyond what is necessary to demonstrate them
- Report vulnerabilities promptly
- Do not disclose vulnerabilities publicly before we have had a reasonable time to address them

Thank you for helping keep HAIEC secure!