Contact: mailto:support@cra-toolkit.com
Expires: 2027-01-01T00:00:00.000Z
Encryption: https://keys.openpgp.org/search?q=support@cra-toolkit.com
Preferred-Languages: en, de, fr, es
Canonical: https://www.cra-toolkit.com/.well-known/security.txt
Policy: https://www.cra-toolkit.com/privacy-policy
Acknowledgments: https://www.cra-toolkit.com/security-acknowledgments

# CRA Compliance Toolkit — Security Contact
# We take security reports seriously and commit to:
#   - Acknowledge receipt within 48 hours
#   - Provide a status update within 7 days
#   - Coordinate disclosure (90-day default window)
# This file follows RFC 9116 and BSI TR-03183-3.