# Security contact information for PAVO Fitness
# https://security.pavofitness.com/
# RFC 9116

Contact: mailto:develop@pavofitness.com
Contact: https://security.pavofitness.com/#report
Expires: 2027-09-07T00:00:00.000Z
Encryption: https://security.pavofitness.com/pgp-key.txt
Encryption: openpgp4fpr:55E6F7CEA1D2369CCDD663F1B60FF645E7B8B98B
Preferred-Languages: en, zh-Hans
Canonical: https://security.pavofitness.com/.well-known/security.txt
Policy: https://security.pavofitness.com/
Policy: https://security.pavofitness.com/zh/

# PGP fingerprint: 55E6 F7CE A1D2 369C CDD6 63F1 B60F F645 E7B8 B98B
# Key expires 2028-09-07. This file expires first, on 2027-09-07 — refresh it
# before that date, and re-check the key expiry at the same time.
#
# Out of scope: the Shopify platform hosting www.pavofitness.com, third-party
# managed services (AWS Cognito, AWS Amplify), non-production environments,
# denial of service, social engineering and physical attacks. See the policy.
#
# We offer rewards of up to USD 1000 or PAVO Fitness merchandise for valid,
# previously unknown vulnerabilities in scope. See the policy for conditions.