# Finisit security disclosure — RFC 9116
# https://securitytxt.org/

Contact: mailto:security@finisit.com
Expires: 2027-05-03T00:00:00.000Z
Preferred-Languages: en, th
Canonical: https://finisit.app/.well-known/security.txt
Policy: https://finisit.app/SECURITY.md
Acknowledgments: https://finisit.app/security-acknowledgments.html

# Vulnerability disclosure program (VDP)
# Coordinated disclosure model — see SECURITY.md for in-scope assets,
# severity buckets, and response SLAs. Responsible reports earn public
# acknowledgment + (where applicable) a bounty per the published rate sheet.

# Software Bill of Materials (CycloneDX format) regenerated per release
# Hosted: https://finisit.app/sbom.json