Contact: mailto:contact@profit-scanner.com
Expires: 2027-04-20T00:00:00.000Z
Preferred-Languages: en, ro
Canonical: https://profit-scanner.com/.well-known/security.txt
Policy: https://profit-scanner.com/security

# Profit Scanner S.R.L.
# RFC 9116 — Security Researcher Guidelines
#
# We welcome responsible security disclosures. Please contact us at the
# address above and include:
#   - A clear description of the issue
#   - Steps to reproduce (proof of concept)
#   - Affected URL or asset
#   - Your preferred credit name (if any)
#
# Scope: profit-scanner.com, app.profit-scanner.com, and the published
# Chrome extension (Profit Scanner - Amazon FBA Deal Analyzer).
#
# Out of scope: social engineering of our staff, physical attacks,
# denial-of-service (DoS), automated scanner output without manual
# validation, and findings already publicly known (use mxtoolbox, SSL
# Labs, securityheaders.com before reporting).
#
# We do not currently operate a formal bug bounty program. We review all
# submissions and may offer a thank-you gesture at our discretion for
# legitimate, previously unknown findings that result in fixes.
#
# Please allow up to 7 days for an initial response.