Contact: mailto:security@mendezgrowth.com
Contact: https://app.plixana.mendezgrowth.com/security/report
Expires: 2027-01-01T00:00:00.000Z
Encryption: https://app.plixana.mendezgrowth.com/.well-known/pgp-key.txt
Preferred-Languages: es, en
Canonical: https://app.plixana.mendezgrowth.com/.well-known/security.txt
Policy: https://app.plixana.mendezgrowth.com/security
Acknowledgments: https://app.plixana.mendezgrowth.com/security/hall-of-fame

# Plixana Security Disclosure
#
# Si descubriste una vulnerabilidad, agradecemos que la reportes
# directamente a security@mendezgrowth.com en lugar de divulgarla
# públicamente. Respondemos en 72 horas.
#
# Alcance: app.plixana.mendezgrowth.com, agents.plixana.mendezgrowth.com,
# plixana.mendezgrowth.com.
#
# Out of scope: clickjacking en pages sin sensitive actions,
# rate-limiting bypasses sin impacto demostrable, ataques que requieren
# physical access al device del user, social engineering.