# Housing Match — Security Vulnerability Disclosure
# https://housingmatch.com.au/.well-known/security.txt

Contact: mailto:hello@housingmatch.com.au
Expires: 2027-08-31T23:59:59.000Z
Preferred-Languages: en
Canonical: https://housingmatch.com.au/.well-known/security.txt
Policy: https://housingmatch.com.au/trust
Acknowledgements: https://housingmatch.com.au/trust

# Reporting process:
# Please email hello@housingmatch.com.au with details of any security
# vulnerability discovered in Housing Match platforms, including:
#   - A clear description of the issue and its potential impact
#   - Steps to reproduce (proof of concept)
#   - Any affected URLs, endpoints or components
#
# We commit to:
#   - Acknowledging receipt within 2 business days
#   - Providing an initial assessment within 5 business days
#   - Keeping you informed of remediation progress
#   - Not taking legal action against good-faith security research
#
# We request that researchers:
#   - Do not access, modify, or delete data belonging to other users
#   - Do not attempt to obtain PII, NDIS numbers, or health data
#   - Do not degrade platform availability for other users
#   - Report vulnerabilities promptly and before public disclosure
#   - Allow reasonable time for remediation before publishing details