# RealApproval Security Policy
# Responsible disclosure of security vulnerabilities is welcomed.
# Please report any findings to the contact below before public disclosure.

Contact: mailto:security@realapproval.com
Expires: 2027-05-06T00:00:00.000Z
Preferred-Languages: en
Canonical: https://realapproval.com/.well-known/security.txt
Policy: https://realapproval.com/contact
Hiring: https://realapproval.com/contact

# Scope
# In scope: realapproval.com and any subdomain operated by Abode Loan, LLC.
# Out of scope: third-party services we depend on (report directly to those vendors).

# Acknowledgement
# We aim to acknowledge reports within 5 business days. We do not currently
# operate a paid bug bounty, but we credit researchers who responsibly disclose.