# RFC 9116 security disclosure file for sickslip.co
# https://datatracker.ietf.org/doc/html/rfc9116
#
# SickSlip is a HIPAA-covered entity. Security researchers reporting
# vulnerabilities in production code or infrastructure that affects
# patient health information should use the contacts below.

Contact: mailto:support@sickslip.co
Contact: mailto:adam@sickslip.co
Preferred-Languages: en
Canonical: https://www.sickslip.co/.well-known/security.txt
Policy: https://www.sickslip.co/breach-policy
Encryption: https://www.sickslip.co/hipaa-notice
Expires: 2027-05-25T00:00:00.000Z

# Scope: any vulnerability affecting customer data, PDF integrity,
# verification endpoint authenticity, or HIPAA-covered systems.
# Out of scope: rate-limiting opinions, automated scanner false
# positives, social engineering of Dr. Kawalek personally.