Contact: mailto:security@faceswapai.com
Contact: mailto:security@deepswapai.com
Expires: 2027-12-31T23:59:59.000Z
Encryption: https://faceswapai.com/.well-known/pgp-key.txt
Preferred-Languages: en, zh
Canonical: https://faceswapai.com/.well-known/security.txt
Policy: https://faceswapai.com/security-and-privacy
Acknowledgments: https://faceswapai.com/trust#hall-of-fame

# Vulnerability disclosure policy:
# - Responsible disclosure preferred. We respond to all reports within 48 hours.
# - Critical vulnerabilities (RCE, account takeover, payment) acknowledged within 4 hours.
# - Out-of-scope: rate-limit testing without prior coordination, social engineering, physical attacks.
# - In-scope: faceswapai.com, deepswapai.com, *.faceswapai.com, *.deepswapai.com