# Crosshead launch-era disclosure policy
# No public bug bounty is active for this launch. Report issues privately to the contact below.
# Include reproduction steps, affected endpoint or revision, and whether active exploitation is suspected.
# Reports are triaged by the Crosshead backend owner and acknowledged within 1 business day during launch week.

Contact: mailto:josh@crosshead.sh
Expires: 2027-04-08T00:00:00Z
Preferred-Languages: en
Canonical: https://crosshead.sh/.well-known/security.txt