# Multipliers AI — Vulnerability Disclosure Policy
# RFC 9116 — https://www.rfc-editor.org/rfc/rfc9116
#
# We welcome reports of security issues from independent researchers.
# Please review the full policy at the URL below before reporting.

Contact: mailto:security@multipliers.ai
Contact: https://multipliers.ai/security/disclosure
Expires: 2027-07-28T22:04:19.886Z
Policy: https://multipliers.ai/security/disclosure
Canonical: https://multipliers.ai/.well-known/security.txt
Preferred-Languages: en
Acknowledgments: https://multipliers.ai/security/hall-of-fame

# 90-day disclosure window. Critical (CVSS ≥ 9.0): 24h triage.
# Bug bounty: pending Phase 4 — see /security/disclosure for current state.