Contact: mailto:info@mrpopup.co
Preferred-Languages: en, es
Policy: https://mrpopup.co/security
Acknowledgments: https://mrpopup.co/security#acknowledgments
Canonical: https://mrpopup.co/.well-known/security.txt
Expires: 2026-12-31T23:59:59Z

Scope:
- Authentication issues
- Authorization bypass
- Data exposure
- Billing-related vulnerabilities

Out-of-Scope:
- SPF / DKIM / DMARC configuration issues
- Rate limiting suggestions
- UI / UX bugs
- Social engineering attempts
- Denial of service (DoS) tests

Rewards:
- No monetary rewards at this time

Disclosure:
- Please provide clear reproduction steps
- Do not request payment to disclose details
- Do not threaten public disclosure
- Do not publicly share details before we have time to fix