Purpose: Encourage ethical security testing and define how researchers can report vulnerabilities.

Key Sections:

• How to report vulnerabilities (e.g., security@secrato.com)
• Scope of testing (non-production only, no DoS, no user data scraping)
• Response expectations (e.g., 5 business days)
• No legal action commitment for good-faith testing