Contact: mailto:security@lockio.ru
Contact: mailto:support@lockio.ru
Expires: 2027-12-31T23:59:59.000Z
Preferred-Languages: ru, en
Canonical: https://lockio.ru/.well-known/security.txt
Policy: https://lockio.ru/security-policy
Acknowledgments: https://lockio.ru/security-policy#thanks

# Lockio.ru is a password manager. Take responsibility — disclose privately,
# we'll fix and credit you.
#
# We pay nothing for low-severity findings (XSS without auth bypass,
# missing security headers, etc) but acknowledge publicly on the
# /security-policy page. Critical findings (RCE, auth bypass, vault leak
# under realistic threat model) are paid case-by-case — write to
# security@lockio.ru for an offer before public disclosure.