# Greene Insurance Group, LLC — security contact
#
# NOTE FOR RESEARCHERS AND AUTOMATED SCANNERS
# Greene Insurance is a fictional company. This site is a demo and integration
# fixture: static files plus two unauthenticated form-intake endpoints
# (/api/quote, /api/contact) that validate input and discard it. No database,
# no customer data,
# and no authentication of any kind. The domain is under the reserved .example
# TLD (RFC 2606) and the mailboxes below do not resolve.
#
# There is genuinely nothing here to compromise. This file exists because a
# site carrying the shape of a licensed financial institution should also carry
# the disclosure furniture one has, and because a discovery pipeline probing
# /.well-known/security.txt deserves a real answer.

Contact: mailto:security@greeneinsurance.example
Contact: https://greeneinsurance.example/legal/security/
Expires: 2027-08-06T23:35:40Z
Preferred-Languages: en
Canonical: https://greeneinsurance.example/.well-known/security.txt
Policy: https://greeneinsurance.example/legal/security/

# Scope
#
# In scope:  greeneinsurance.example and everything served from it.
# Out of scope: the third-party SaaS products named in the software inventory
# on https://greeneinsurance.example/colophon/. Those are other companies'
# systems. Report anything you find in them to that vendor, not to us.
#
# No bug bounty is offered. No vulnerability disclosure agreement is in force.
# We do not authorise testing that would degrade the service for others.

# Related
#
# Vulnerability disclosure policy: https://greeneinsurance.example/legal/security/
# Privacy policy:                  https://greeneinsurance.example/legal/privacy/
# How this site is built:          https://greeneinsurance.example/colophon/