# DWS IQ Platform Security Contact (RFC 9116)
# https://dws10.com/.well-known/security.txt
# Lifetime Oy — Helsinki, Finland

Contact: mailto:security@lifetime.fi
Expires: 2027-03-18T00:00:00.000Z
Preferred-Languages: en, fi
Canonical: https://dws10.com/.well-known/security.txt
Policy: https://dws10.com/legal/#responsible-disclosure

# Scope: dws10.com, dws6.com, onelifetime.world, API endpoints, MCP servers
# Out of scope: Social engineering, physical attacks, denial of service
# Acknowledgment: Within 48 hours
# Fix timeline: Critical 48h, High 7d, Medium 30d, Low next release