# Jugg.ai Workforce — responsible disclosure
#
# The product holds customers' model provider keys and OAuth tokens for their
# connected accounts (GitHub, Google, Microsoft, Slack), so a report about
# credential exposure, tenant isolation, or the custom-tool sandbox is the most
# valuable thing you can send us. We will not pursue researchers acting in good
# faith, and we will credit you if you want to be credited.
#
# Canonical is listed for both hosts the file is served from (RFC 9116 §2.5.4).

Contact: mailto:security@jugg.ai
Expires: 2027-08-28T00:00:00.000Z
Preferred-Languages: en
Canonical: https://jugg-workforce.vercel.app/.well-known/security.txt
Canonical: https://jugg.ai/.well-known/security.txt
Policy: https://jugg.ai/security