# Thunderclip — security contact (RFC 9116)
#
# Found a vulnerability? We would rather hear it from you than read about it
# later. Report in good faith, give us a reasonable chance to fix it, and we
# will not pursue you.

Contact: mailto:security@gomezsas.com
Expires: 2027-09-01T00:00:00.000Z
Preferred-Languages: en, es
Canonical: https://thunderclip.com/.well-known/security.txt
Policy: https://thunderclip.com/acceptable-use

# Operated by GÓMEZ S.A.S. (NIT 900585216-9), Bucaramanga, Colombia.
#
# In scope: thunderclip.com and the API behind it.
# Out of scope: content uploaded by users. A malicious page served from a
# *.clip.lc host is an abuse report, not a vulnerability — send those to
# legal@gomezsas.com. Origin isolation means such a page cannot reach the
# application; if you find that it can, that IS a vulnerability and we want
# to know urgently.