# Security Policy for Maqami

## Reporting Security Vulnerabilities

At Maqami, we take security seriously. We appreciate your efforts to responsibly disclose your findings.

### Contact
Email: security@maqami.co
Encryption: We accept PGP-encrypted messages

### Preferred Languages
English

### Policy
We follow responsible disclosure practices. Please allow us reasonable time to address the issue before any public disclosure.

### Scope
- maqami.co and all subdomains
- api.maqami.co
- Maqami mobile applications
- Core platform infrastructure

### Out of Scope
- Social engineering attacks
- Physical security
- Third-party services

### Acknowledgements
We maintain a hall of fame for security researchers who help keep Maqami secure.

### Response Timeline
- Initial response: Within 48 hours
- Status update: Within 5 business days
- Resolution: Varies by severity

Expires: 2026-12-31T23:59:59.000Z
Canonical: https://maqami.co/.well-known/security.txt