Contact: mailto:contact@atriumwealthcouncil.com
Contact: mailto:contact@atriumwealthcouncil.com
Expires: 2027-04-21T00:00:00.000Z
Preferred-Languages: en
Canonical: https://atriumwealthcouncil.com/.well-known/security.txt
Policy: https://atriumwealthcouncil.com/.well-known/security.txt
Acknowledgments: https://atriumwealthcouncil.com/.well-known/security.txt

# Atrium Wealth Council — Responsible Disclosure
#
# Atrium Wealth Council is a product of Alter3d Development LLC.
#
# We welcome reports of security vulnerabilities affecting Atrium Wealth
# Council, our infrastructure, or our customers' data. Please email one of
# the contacts above with:
#   - A clear description of the issue
#   - Reproduction steps (or proof-of-concept)
#   - Any relevant logs, requests, or screenshots
#   - Your preferred handle for acknowledgement (optional)
#
# Scope: atriumwealthcouncil.com and *.atriumwealthcouncil.com.
# Out of scope: third-party services we depend on (report directly to them),
# rate-limit / brute-force findings without demonstrated impact, missing
# security headers without an exploitable scenario, and self-XSS.
#
# Rules of engagement:
#   - Do not access, modify, or exfiltrate data that does not belong to you.
#   - Do not run automated scans that degrade service for other users.
#   - Use a test account you create for proof-of-concept; do not target
#     real customer accounts.
#   - Give us a reasonable window to remediate before public disclosure.
#
# We aim to acknowledge reports within 3 business days and to keep you
# updated on remediation progress. Thank you for helping keep members'
# financial data safe.