# security.txt — RFC 9116 coordinated vulnerability disclosure
# Location: /.well-known/security.txt  (also mirrored at /security.txt)
# Website: BRV Electro and Solar Technologies Pty Ltd

Contact: mailto:vosb007@gmail.com
Contact: tel:+27691387794
Expires: 2027-01-01T00:00:00.000Z
Preferred-Languages: en, af
Canonical: https://example.com/.well-known/security.txt
Policy: https://example.com/security-policy
Encryption: https://example.com/pgp-key.txt
Acknowledgments: https://example.com/security-acknowledgements

# Scope
# ------------------------------------------------------------------
# In scope:    the static HTML documents served by this site
# Out of scope: third-party services (Facebook, Pexels CDN, email providers)
#
# This site is intentionally static: it ships no JavaScript, no cookies,
# no analytics and no server-side form handlers. The attack surface is
# limited to the delivered markup and the HTTP headers serving it.
#
# When reporting, please include:
#   • the affected URL
#   • a step-by-step reproduction
#   • the observed vs. expected behaviour
#   • the impact you believe is achievable
#
# Please do not run automated scanners, denial-of-service tests, or any
# test that could degrade service for real customers.