Contact: mailto:security@coursecompass.ie
Contact: mailto:info@coursecompass.ie
Expires: 2026-12-31T23:59:59.000Z
Canonical: https://coursecompass.ie/.well-known/security.txt
Policy: https://coursecompass.ie/security-policy
Hiring: https://coursecompass.ie/careers
Preferred-Languages: en

# Security Policy for CourseCompass

We take security seriously. If you discover a security vulnerability, please:

1. Email us at security@coursecompass.ie
2. Provide detailed information about the vulnerability
3. Allow us reasonable time to fix the issue before disclosure
4. Do not access user data or perform destructive actions

We appreciate responsible disclosure and will acknowledge valid reports.

# Scope
- coursecompass.ie and all subdomains
- Mobile applications (if applicable)
- API endpoints

# Out of Scope
- Social engineering attacks
- Physical attacks
- Denial of service attacks
- Issues in third-party services we don't control