Contact: mailto:security@ctforex.com
Contact: https://ctforex.com/contact
Expires: 2025-12-31T23:59:59.000Z
Encryption: https://ctforex.com/pgp-key.txt
Preferred-Languages: en
Canonical: https://ctforex.com/.well-known/security.txt
Policy: https://ctforex.com/security-policy
Acknowledgments: https://ctforex.com/security-acknowledgments

# Security Policy
# If you discover a security vulnerability, please report it responsibly.
# We appreciate your efforts to improve our security.

# Scope
# This security policy applies to:
# - ctforex.com and all subdomains
# - Mobile applications (if any)
# - API endpoints

# Out of Scope
# - Third-party services and integrations
# - Social engineering attacks
# - Physical attacks

# Response Time
# We aim to respond to security reports within 48 hours
# and provide updates every 7 days until resolution.