# Conformant — security contact (RFC 9116)
# Conformant operates a coordinated disclosure program for the MCP servers it
# grades. We hold ourselves to the same standard: report an issue with
# Conformant itself, or dispute a grade, here.

Contact: mailto:security@conformant.io
Expires: 2027-06-16T00:00:00.000Z
Preferred-Languages: en
Canonical: https://conformant.io/.well-known/security.txt
Policy: https://conformant.io/disclosure