# OrbiAds — Security disclosure policy (RFC 9116)
#
# We welcome reports of security issues that may affect orbiads.com,
# the OrbiAds API, the MCP server, the CLI, or any related infrastructure.
# Please contact us before public disclosure.

Contact: mailto:support@orbiads.com
Expires: 2027-05-21T00:00:00.000Z
Preferred-Languages: fr, en
Canonical: https://orbiads.com/.well-known/security.txt
Policy: https://orbiads.com/privacy

# Scope: orbiads.com and all subdomains, GAM integration paths, MCP server
# (https://orbiads.com/mcp), and the OrbiAds CLI (npm `orbiads-cli`).
# Out of scope: third-party Google Ad Manager services (report directly to Google).