# Wormsign security disclosure contact
Contact: mailto:w0rmsign@proton.me
Contact: https://x.com/w0rmsign
Expires: 2027-05-28T00:00:00Z
Preferred-Languages: en
Canonical: https://wormsign.io/.well-known/security.txt
Policy: https://wormsign.io/feed.html

# False-positive reports
# Send the indicator value, the source (block / hunt-only / review tier), and the
# justification for review. We re-audit and update host_classify / static_ioc_extract
# rules; published feeds re-generate on the next 4h publish cycle.

# Indicator-feed consumers
# STIX 2.1 / TAXII 2.1 / blocklist / CSV / JSON formats are at https://wormsign.io/feed/
# No API key required. Contact us if you need a webhook or a custom format.

# PGP
# w0rmsign@proton.me has a Proton-managed PGP key discoverable via WKD at
# https://proton.me/.well-known/openpgpkey/proton.me/hu/{hash}. Send encrypted
# mail using any WKD-aware client (Thunderbird, gpg --locate-keys, Proton Mail
# native, etc.).